SMTPD will close a connection after the maximum number of invalid recipients have been reached. This is not turned on by default. To enable this behavior create or edit the following registry key: Key: MaxInvalidRCPTsPerSession Type: DWORD Default: 0 Location: HEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SMTPD32\Parameters
If the this value is non-zero, it the server will close the connection if that number of invalid Recipients are received. Travis -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of S.J.Stanaitis Sent: Thursday, May 26, 2005 8:25 AM To: [email protected] Subject: Re: [IMail Forum] Dictionary Attacks I was just inquiring about this registry entry that makes SMTPD drop a connection if someone sends more than X number of emails to an incorrect address. Perhaps someone here has been mislabeling it as tarpitting, either way when I get a chance I'm going to RTFM like Tom said and figure out how to turn it on myself... Then I'll be a nice person and post it here in the event someone else doesn't have TFM handy. Sam Eric Shanbrom wrote: >My understanding of the definition of tarpitting is slowing down the delivery of messages to multiple recipients...If my understanding is correct see "delay between recipients" in the SMTP Advanced tab in IMail Admin. If not please enlighten me to the proper mening > >Thnx >Eric S > ----- Original Message ----- > From: Matrosity Tech Support > To: [email protected] > Sent: Thursday, May 26, 2005 9:33 AM > Subject: Re: [IMail Forum] Dictionary Attacks > > > that's because imail doesn't have tarpitting by definition. > > S.J.Stanaitis wrote: > Stupid question, where's this mystery reg-key to enable tarpitting. I did a search for tarpitting in messages from the last 2 months and found zilch. > > Thanks, > Sam > > Dev wrote: >True, but I still give credit to Ipswitch, despite >their incredibly slow product development pace, of >getting the dictionary attack countermeasure deployed >ahead of what they originally planned. The attacks were >killing a lot of us. > >In fact, the lack of tarpitting in v.8 was the final >straw that forced us to migrate to a competing mail >server. Average CPU usage immediately went from 50% to >1%. In fact, I recently did the first reboot (for MS >patches) with the production server--after 96 days of >continuous uneventful uptime. Total system memory usage >remained rock stable (+-30MB) the entire time. > >The next release of Imail must be fully-featured and >bullet-proof, otherwise I can't see them surviving >against increasingly superior competition. > >Dev > > > >Tuesday, May 24, 2005, 2:29:40 PM, you wrote: > >HE> I am sorry but I disagree. > >HE> This has been requested for a long time and >HE> this is a common feature in >HE> many programs. > >HE> Ipswitch decide in the last minute to add it, >HE> I think that show where >HE> their focus has been. >HE> ICS and not Imail server. > > > >HE> Dev wrote: > > In Ipswitch's defense, I went on a rant about this >limited functionality last month, and Tripp replied >with some helpful background here: > >http://www.mail-archive.com/[email protected]/msg98088.html > >Dev > >Tuesday, May 24, 2005, 9:16:10 AM, you wrote: > >HE> I really don't understand why Ipswitch did not >HE> make this function work a >HE> little better. >HE> Just dropping the connection seems to be lazy on their part. >HE> They could have made this function better while at it. > >HE> H. > > >HE> Matrosity Tech Support wrote: > > > > no period of time so they can simply open >another connection and keep >doing so. > >Tom Pepper wrote: > > > > IMail 8.20: After the maximum invalid >recipients are reached, the >SMTPD will close the connection. > >How long is this IP address denied access to >the server? Is it reset >after a period of time? > >Thanks, >Tom > > > >To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html >List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ >Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > > > > > > -- S.J.Stanaitis Network Administrator, Decorative Product Source http://www.dpsource.com/ [EMAIL PROTECTED] (877)-650-8054 x160 To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
