Heimir,

Wednesday, January 22, 2003 you wrote:
HE> And I am conerend that Blackice will do the same.

I  never  saw  any  issues  with  sending and BlackIce unless the user
wasn't  authenticated or wasn't from a safe IP.  Even so the automatic
blacklisting is temporary.

We  installed  BlackIce  because of the huge problem we've been having
with dictionary attacks.

Unfortunately  in  our  experience BlackIce does not act against these
attacks until the attack is mostly complete at which time time it does
temporarily  blacklist  the offending ip address.  This apparently has
to  do  with  how  it  detects the maximum errors along with how Imail
reports  them.  So it is still not unusual for us to have attacks that
attempt  more than one hundred recipients.  Now this is an improvement
because  unprotected  we've  seen many instances where the attacks try
thousands of recipients.

However  we  started  having  0x0000007F  Errors causing the server to
reboot.   In  our  case  the  error  was "0x00000008 Double Fault."  I
suspected BlackIce and turned it off and the errors have ceased.


Terry


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to