Perhaps you're right on the definition. The feature other mail server
software call "tarpitting" includes a time interval where IP's are
rejected for a specified amount of time. Imail doesn't do that yet and
simply closes the connection. This allows the sending mail server to
reconnect if it is setup to do that.
Great feature but it's just a speed bump to dictionary attacks until
ipswitch upgrades it to retain a list of IP's to reject for a certain
amount of time.
Glad it's in there but we're missing that key feature that others
already enjoy.
Eric Shanbrom wrote:
My understanding of the definition
of tarpitting is slowing down the delivery of messages to multiple
recipients...If my understanding is correct see "delay between
recipients" in the SMTP Advanced tab in IMail Admin. If not please
enlighten me to the proper mening
Thnx
Eric S
-----
Original Message -----
Sent:
Thursday, May 26, 2005 9:33 AM
Subject:
Re: [IMail Forum] Dictionary Attacks
that's because imail doesn't have tarpitting by definition.
S.J.Stanaitis wrote:
Stupid
question, where's this mystery reg-key to enable tarpitting. I did a
search for tarpitting in messages from the last 2 months and found
zilch.
Thanks,
Sam
Dev wrote:
True, but I still give credit to Ipswitch, despite
their incredibly slow product development pace, of
getting the dictionary attack countermeasure deployed
ahead of what they originally planned. The attacks were
killing a lot of us.
In fact, the lack of tarpitting in v.8 was the final
straw that forced us to migrate to a competing mail
server. Average CPU usage immediately went from 50% to
1%. In fact, I recently did the first reboot (for MS
patches) with the production server--after 96 days of
continuous uneventful uptime. Total system memory usage
remained rock stable (+-30MB) the entire time.
The next release of Imail must be fully-featured and
bullet-proof, otherwise I can't see them surviving
against increasingly superior competition.
Dev
Tuesday, May 24, 2005, 2:29:40 PM, you wrote:
HE> I am sorry but I disagree.
HE> This has been requested for a long time and
HE> this is a common feature in
HE> many programs.
HE> Ipswitch decide in the last minute to add it,
HE> I think that show where
HE> their focus has been.
HE> ICS and not Imail server.
HE> Dev wrote:
In Ipswitch's defense, I went on a rant about this
limited functionality last month, and Tripp replied
with some helpful background here:
http://www.mail-archive.com/[email protected]/msg98088.html
Dev
Tuesday, May 24, 2005, 9:16:10 AM, you wrote:
HE> I really don't understand why Ipswitch did not
HE> make this function work a
HE> little better.
HE> Just dropping the connection seems to be lazy on their part.
HE> They could have made this function better while at it.
HE> H.
HE> Matrosity Tech Support wrote:
no period of time so they can simply open
another connection and keep
doing so.
Tom Pepper wrote:
IMail 8.20: After the maximum invalid
recipients are reached, the
SMTPD will close the connection.
How long is this IP address denied access to
the server? Is it reset
after a period of time?
Thanks,
Tom
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
--
S.J.Stanaitis
Network Administrator, Decorative Product Source
http://www.dpsource.com/
[EMAIL PROTECTED]
(877)-650-8054 x160
|
