The only problem with LDAP Auth is it will miss any Lists or Aliases as only Userid's are in the LDAP database. I'm not sure if Sandy did anything with his scripts but I think he has something like Alias-to-LDAP that would solve this. Sandy?
Eric S ----- Original Message ----- From: "Jason Loven" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Friday, April 08, 2005 11:01 AM Subject: RE: [IMail Forum] Account Harvesting Are you doing LDAP verification from within Postfix or are you using Postfix to blacklist abusive/dictionary Ips? -----Original Message----- From: Dan Horne [mailto:[EMAIL PROTECTED] Sent: Friday, April 08, 2005 10:54 AM To: [email protected] Subject: RE: [IMail Forum] Account Harvesting I agree. When we had this problem, we originally set up Black Ice Server Protection on our MX, and used the config edits posted to the list to enable blocking of any IP address with more than X SMTP ERR's in Y minutes. Within a day, that list had over 25,000 IP addresses in it and the Black Ice Server was bogging down the MX as bad or worse than the dictionary attacks themselves. So we went with IMGate, and later just postfix (not my decision, the uppers didn't like IMGate's restrictive policies, so we're only using it to run interference for the dictionary attacks) as a gateway to Imail. We have never looked back. The itty bitty postfix box, dual p2 333's is brushing the dictionary attacks away like horseflies, where the dual 2.4GHz Xeon w/HT running Imail simply couldn't keep up. -Dan Horne To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
