Check Sandy's sig.  You need aliases2ldap and ldap2aliases. 

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Guy
Deslauriers
Sent: Thursday, May 05, 2005 2:42 PM
To: [email protected]
Subject: RE: [IMail Forum] Log file size 5 times bigger after upgrade to
8.20

Case resolved.

And actually this is a MAJOR drawback to ever use the Max invalid rcpt
at the SMTP connection registry fix, when you have a secondary MX.

What was happening is that since my Primary MX was closing connection on
invalid addresses, all the attacks where reverting to the "friendlier"
secondary MX that wasn't closing connections.  Add all the closed
connections (after 2 invalid) attacks redirected to the secondary MX and
the secondary MX trying to resend the undeliverable every 3 hours,
failing after
2 invalids, re-queuing, trying again in 3 hours, failing after 2
invalids, re-queuing, etc, etc, etc....

Results:  5000++ emails queued and constantly growing on the secondary
MX.

Resolution:  Undo the reg fix and let my server being attack like usual

Does anyone have some suggestions on how to prevent those dictionary
attacks?

Spare me from 3rd parties solution, Imail mainly does what we need it to
do and we don't NEED (and/or) WANT to add another point of failure.

Thanks

gd

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Sean Kenworthy
Sent: Wednesday, May 04, 2005 11:00 AM
To: [email protected]
Subject: RE: [IMail Forum] Log file size 5 times bigger after upgrade to
8.20

We added a lot more logging in SMTP processing for Verbose.  If you
don't need all the extra logging you can turn off Verbose and Debugging
under the SMTP service tab.

-Sean

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Guy
Deslauriers
Sent: Tuesday, May 03, 2005 3:16 PM
To: [email protected]
Subject: [IMail Forum] Log file size 5 times bigger after upgrade to
8.20

Hi all, 

Has anyone who updated to 8.2 seen their log file size increased?  Mine
has jumped from an average of 10MB a day to close to 50MB a day???  I've
had verbose logging for all this time but now I'm tempted to turn it off
if I don't find any solutions to this increased size.

The only thing I added was the registry fix to close the SMTP connection
after 2 invalid addresses.  I know this mean an additional 3 lines in
the logs when being attacked (ehlo, mail from and max invalid rcpts
exceeded) but to jump being 5 times bigger, I really don't get it.

Any help/suggestions would be appreciated.

Thanks

gd




To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/





To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to