Are you doing LDAP verification from within Postfix or are you using
Postfix to blacklist abusive/dictionary Ips? 

-----Original Message-----
From: Dan Horne [mailto:[EMAIL PROTECTED] 
Sent: Friday, April 08, 2005 10:54 AM
To: [email protected]
Subject: RE: [IMail Forum] Account Harvesting

I agree.  When we had this problem, we originally set up Black Ice
Server Protection on our MX, and used the config edits posted to the
list to enable blocking of any IP address with more than X SMTP ERR's in
Y minutes.  Within a day, that list had over 25,000 IP addresses in it
and the Black Ice Server was bogging down the MX as bad or worse than
the dictionary attacks themselves.

So we went with IMGate, and later just postfix (not my decision, the
uppers didn't like IMGate's restrictive policies, so we're only using it
to run interference for the dictionary attacks) as a gateway to Imail.
We have never looked back.  The itty bitty postfix box, dual p2 333's is
brushing the dictionary attacks away like horseflies, where the dual
2.4GHz Xeon w/HT running Imail simply couldn't keep up.  

-Dan Horne

To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to