Re: [IMail Forum] Auto deny IP's after x amount of unknown user???

Matrosity Tech Support Wed, 09 Feb 2005 19:20:15 -0800

BlackIce Defender Server will do this but it's undocumented. Search the list archives and you'll find all the details.

Barry Bahrami wrote:

Below is an Imail server log of a spammer hacking email accounts to send
junk to (@spammedomain.com).  It's obvious this person is trying every
possible name @spammeddomain.com.  I see this all the time.  It is hell on
people with nobody aliases setup.

Is there anything I can do to have Imail automatically reject the senders IP
after x amount of invalid user's during a n minute window???

Thank you,

Barry Bahrami Commercial Network Services www.CommercialNetworkServices.com

-----Original Message-----
20050209 172849 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172849 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172849 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172849 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172849 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172851 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172851 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172851 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172851 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172852 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172852 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172852 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172852 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172852 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172852 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172852 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172852 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172853 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172853 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172853 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172853 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172853 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172853 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172853 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172853 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172854 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172854 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172854 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172854 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172854 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172854 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172854 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172854 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172855 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172855 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172855 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172855 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172856 127.0.0.1       SMTPD (17950092) [68.107.113.200] MAIL FROM:
<[EMAIL PROTECTED]>
20050209 172856 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172856 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172856 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172856 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172856 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172856 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172857 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172857 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172857 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172857 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172857 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172857 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172857 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172857 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172858 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172858 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172858 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172858 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172858 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172858 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172859 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172859 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172859 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172859 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172859 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172859 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172859 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172859 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172900 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172900 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172900 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172900 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172901 127.0.0.1       SMTPD (17950092) [68.107.113.200] MAIL FROM:
<[EMAIL PROTECTED]>
20050209 172901 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172901 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172901 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172901 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172901 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172901 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172902 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172902 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172902 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172902 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172902 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172902 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172902 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172902 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172903 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172903 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172903 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172903 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172903 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172903 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172903 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172903 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]
20050209 172904 127.0.0.1       SMTPD (17950092) [68.107.113.200] RCPT TO:
<[EMAIL PROTECTED]>
20050209 172904 127.0.0.1       SMTPD (17950092) [68.107.113.200] ERR
mymailserver.com invalid user <[EMAIL PROTECTED]


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Re: [IMail Forum] Auto deny IP's after x amount of unknown user???

Reply via email to