You can avoid this problem by configuring your MX backup to only accept mail for known recipients...
Regards, David Gregg dgSoft Internet Services +1.949.584-1514 --- mxGuard for IMail Adds anti-spam *and* anti-virus capabilities to your IMail server. $99 unlimited domains/users. No service agreements. Download and install a free trial version today. http://www.mxGuard.com/Postmaster/FreeTrial.asp --- ----- Original Message ----- From: "Guy Deslauriers" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Thursday, May 05, 2005 11:42 AM Subject: [Spam] RE: [IMail Forum] Log file size 5 times bigger after upgrade to 8.20 > Case resolved. > > And actually this is a MAJOR drawback to ever use the Max invalid rcpt at > the SMTP connection registry fix, when you have a secondary MX. > > What was happening is that since my Primary MX was closing connection on > invalid addresses, all the attacks where reverting to the "friendlier" > secondary MX that wasn't closing connections. Add all the closed > connections (after 2 invalid) attacks redirected to the secondary MX and the > secondary MX trying to resend the undeliverable every 3 hours, failing after > 2 invalids, re-queuing, trying again in 3 hours, failing after 2 invalids, > re-queuing, etc, etc, etc.... > > Results: 5000++ emails queued and constantly growing on the secondary MX. > > Resolution: Undo the reg fix and let my server being attack like usual > > Does anyone have some suggestions on how to prevent those dictionary > attacks? > > Spare me from 3rd parties solution, Imail mainly does what we need it to do > and we don't NEED (and/or) WANT to add another point of failure. > > Thanks > > gd > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Sean Kenworthy > Sent: Wednesday, May 04, 2005 11:00 AM > To: [email protected] > Subject: RE: [IMail Forum] Log file size 5 times bigger after upgrade to > 8.20 > > We added a lot more logging in SMTP processing for Verbose. If you don't > need all the extra logging you can turn off Verbose and Debugging under the > SMTP service tab. > > -Sean > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Guy Deslauriers > Sent: Tuesday, May 03, 2005 3:16 PM > To: [email protected] > Subject: [IMail Forum] Log file size 5 times bigger after upgrade to 8.20 > > Hi all, > > Has anyone who updated to 8.2 seen their log file size increased? Mine has > jumped from an average of 10MB a day to close to 50MB a day??? I've had > verbose logging for all this time but now I'm tempted to turn it off if I > don't find any solutions to this increased size. > > The only thing I added was the registry fix to close the SMTP connection > after 2 invalid addresses. I know this mean an additional 3 lines in the > logs when being attacked (ehlo, mail from and max invalid rcpts exceeded) > but to jump being 5 times bigger, I really don't get it. > > Any help/suggestions would be appreciated. > > Thanks > > gd > > > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > > > > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
