Roger,

We run the latest version of BlackICE and have no problems with SMTP AUTH.  The only 
modification we've made to BlackICE is a change to the issuelist.csv file to 
auto-block the "smtp too many errors" event.  So, I do not think your problem is with 
BlackICE.

But to test it you could add a temporary firewall rule to always allow AND trust all 
traffic on port 25.

Bill


-----Original Message-----
From: Roger Heath
Sent: Sat, 25 Jan 2003 21:18:59 -0600
Subject: Re[8]: [IMail Forum] SMTP AUTH Serious Problems


Reply to: Len Conrad
      Re: [IMail Forum] SMTP AUTH Serious Problems on Saturday 9:00:25 PM

BlackIce is amazing. It shows so much about ports and their activities
and  it is smart enough to tell you what kind of traffic is happening.
I  could  see  many using SMTP AUTH requests and it was even clear how
often  users are setting up their readers to poll mail by this. If you
correlate  your  IMail  logs with this in terms of matching times, you
could clearly see who has their readers set high to poll mail often.

I'll be looking at how to disable this as potentially blocked. I have
not found it yet.

--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com


----- Copy of Original Message(s): -----


>>I  was  really  referring to Imail SMTP, sorry. BlackIce does log SMTP
>>Authentications

L> wait a minute!  How is BI involved in listening on port 25 at all? It 
L> proxies SMTP?  If it does, turn it off.  supect numero uno in this case.

L> But apparently other people here use BI ok.

L> Len




L> To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
L> List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
L> Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
L> --
L> ActivatorMail(tm) ver.122102 Scanned for all viruses by 
L> www.activatormail.com intelligent anti-virus anti-spam service

--
ActivatorMail(tm) ver.122102 Scanned for all viruses by 
www.activatormail.com intelligent anti-virus anti-spam service


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/




To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to