Another example - approx 1,000 customers sharing a web server, e-mail being sent from
their website forms using for example CDONTS. And all 1,000 of them are on the same
Imail server.
It is possible that within a short amount of time may generate a bunch of erroneous
messages that will hit the Imail server.
Because of this we are actually not using the "auto-deny possible hack attempts"
feature on our Imail servers.
-----Original Message-----
From: Sanford Whiteman [mailto:[EMAIL PROTECTED]]
Sent: Wed 1/22/2003 6:26 PM
To: Len Conrad
Cc:
Subject: Re[7]: [IMail Forum] what a pain!
> You think I'm cheating by over-qualifying with "one minute" ? Make
> it 5 minutes, make it an hour, make a day...Statistically, it just
> doesn't happen.
If you're saying that a hosting client (obviously, this was what the
post in question was referring to in using the word "client":
http://www.i360hosting.com) with 100+ users is never going to hit your
server 100 times an hour from the same IP, you've never run a hosting
company. Perhaps you're referring to ERRORS from a single IP, which is
a different story and certainly suspect.
I'm sure you've misunderstood the issue, since surely you wouldn't
make such a mistake if you had all the variables in hand. Nobody said
anything about simultaneous connections (except you), merely the
likelihood of legit NAT clients being interpreted as a concentrated
attack over an period of time designed to catch baddies. As BlackIce
can be tweaked to accomodate whitelisted IPs and higher thresholds,
this is essentially a non-issue, but your conclusion is absolutely
wrong for a hosted environment. Grepping just proves this point.
-Sandy
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
<<winmail.dat>>
