No, I am not using LDAP verification. My purpose was to NOT generate a query to the Imail server for every email. Postfix has a list of valid email addresses and aliases for Imail created by an application on the Imail server every hour and automatically FTP'ed over to postfix. BSD has a scheduled task that runs 5 minutes later that pulls them in to the running configuration.
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jason Loven Sent: Friday, April 08, 2005 11:02 AM To: [email protected] Subject: RE: [IMail Forum] Account Harvesting Are you doing LDAP verification from within Postfix or are you using Postfix to blacklist abusive/dictionary Ips? -----Original Message----- From: Dan Horne [mailto:[EMAIL PROTECTED] Sent: Friday, April 08, 2005 10:54 AM To: [email protected] Subject: RE: [IMail Forum] Account Harvesting I agree. When we had this problem, we originally set up Black Ice Server Protection on our MX, and used the config edits posted to the list to enable blocking of any IP address with more than X SMTP ERR's in Y minutes. Within a day, that list had over 25,000 IP addresses in it and the Black Ice Server was bogging down the MX as bad or worse than the dictionary attacks themselves. So we went with IMGate, and later just postfix (not my decision, the uppers didn't like IMGate's restrictive policies, so we're only using it to run interference for the dictionary attacks) as a gateway to Imail. We have never looked back. The itty bitty postfix box, dual p2 333's is brushing the dictionary attacks away like horseflies, where the dual 2.4GHz Xeon w/HT running Imail simply couldn't keep up. -Dan Horne To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
