I have black ice server installed. It seems like it will do what I need, but I can't for the life of me figure out where to edit pam.smtp.error.count. Can anyone please help point me in the right direction?
Thank you, Barry Bahrami Commercial Network Services www.CommercialNetworkServices.com -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matrosity Tech Support Sent: Wednesday, February 09, 2005 7:14 PM To: [email protected] Subject: Re: [IMail Forum] Auto deny IP's after x amount of unknown user??? BlackIce Defender Server will do this but it's undocumented. Search the list archives and you'll find all the details. Barry Bahrami wrote: >Below is an Imail server log of a spammer hacking email accounts to >send junk to (@spammedomain.com). It's obvious this person is trying >every possible name @spammeddomain.com. I see this all the time. It >is hell on people with nobody aliases setup. > >Is there anything I can do to have Imail automatically reject the >senders IP after x amount of invalid user's during a n minute window??? > >Thank you, > >Barry Bahrami >Commercial Network Services >www.CommercialNetworkServices.com > >-----Original Message----- >20050209 172849 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172849 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172849 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172849 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172849 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172851 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172851 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172851 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172851 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172852 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172852 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172852 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172852 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172852 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172852 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172852 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172852 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172853 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172853 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172853 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172853 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172853 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172853 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172853 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172853 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172854 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172854 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172854 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172854 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172854 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172854 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172854 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172854 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172855 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172855 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172855 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172855 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172856 127.0.0.1 SMTPD (17950092) [68.107.113.200] MAIL FROM: ><[EMAIL PROTECTED]> >20050209 172856 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172856 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172856 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172856 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172856 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172856 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172857 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172857 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172857 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172857 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172857 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172857 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172857 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172857 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172858 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172858 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172858 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172858 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172858 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172858 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172859 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172859 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172859 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172859 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172859 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172859 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172859 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172859 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172900 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172900 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172900 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172900 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172901 127.0.0.1 SMTPD (17950092) [68.107.113.200] MAIL FROM: ><[EMAIL PROTECTED]> >20050209 172901 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172901 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172901 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172901 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172901 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172901 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172902 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172902 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172902 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172902 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172902 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172902 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172902 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172902 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172903 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172903 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172903 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172903 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172903 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172903 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172903 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172903 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] >20050209 172904 127.0.0.1 SMTPD (17950092) [68.107.113.200] RCPT TO: ><[EMAIL PROTECTED]> >20050209 172904 127.0.0.1 SMTPD (17950092) [68.107.113.200] ERR >mymailserver.com invalid user <[EMAIL PROTECTED] > > >To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html >List Archive: >http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ >Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
