As promised:
SMTPD can now block connections after max invalid recipients reached.
SMTPD will close a connection after the maximum number of invalid
recipients have been reached. This is not turned on by default. To
enable this behavior create or edit the following registry key:
Key: MaxInvalidRCPTsPerSession
Type: DWORD
Default: 0
Location:
HEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SMTPD32\Parameters
If the this value is non-zero, it the server will close the connection
if that number of invalid Recipients are received.
Oddly enough the release notes html file hung up both Firefox and
Internet Exploiter. I had to view it in notepad.
Sam
S.J.Stanaitis wrote:
I was just inquiring about this registry entry that makes SMTPD drop a
connection if someone sends more than X number of emails to an
incorrect address. Perhaps someone here has been mislabeling it as
tarpitting, either way when I get a chance I'm going to RTFM like Tom
said and figure out how to turn it on myself... Then I'll be a nice
person and post it here in the event someone else doesn't have TFM handy.
Sam
Eric Shanbrom wrote:
My understanding of the definition of tarpitting is slowing down the
delivery of messages to multiple recipients...If my understanding is
correct see "delay between recipients" in the SMTP Advanced tab in
IMail Admin. If not please enlighten me to the proper mening
Thnx
Eric S
----- Original Message ----- From: Matrosity Tech Support To:
[email protected] Sent: Thursday, May 26, 2005 9:33 AM
Subject: Re: [IMail Forum] Dictionary Attacks
that's because imail doesn't have tarpitting by definition.
S.J.Stanaitis wrote: Stupid question, where's this mystery
reg-key to enable tarpitting. I did a search for tarpitting in
messages from the last 2 months and found zilch.
Thanks,
Sam
Dev wrote: True, but I still give credit to Ipswitch, despite
their incredibly slow product development pace, of
getting the dictionary attack countermeasure deployed
ahead of what they originally planned. The attacks were
killing a lot of us.
In fact, the lack of tarpitting in v.8 was the final
straw that forced us to migrate to a competing mail
server. Average CPU usage immediately went from 50% to
1%. In fact, I recently did the first reboot (for MS
patches) with the production server--after 96 days of
continuous uneventful uptime. Total system memory usage
remained rock stable (+-30MB) the entire time.
The next release of Imail must be fully-featured and
bullet-proof, otherwise I can't see them surviving
against increasingly superior competition.
Dev
Tuesday, May 24, 2005, 2:29:40 PM, you wrote:
HE> I am sorry but I disagree.
HE> This has been requested for a long time and
HE> this is a common feature in HE> many programs.
HE> Ipswitch decide in the last minute to add it,
HE> I think that show where HE> their focus has been.
HE> ICS and not Imail server.
HE> Dev wrote:
In Ipswitch's defense, I went on a rant about this
limited functionality last month, and Tripp replied
with some helpful background here:
http://www.mail-archive.com/[email protected]/msg98088.html
Dev
Tuesday, May 24, 2005, 9:16:10 AM, you wrote:
HE> I really don't understand why Ipswitch did not
HE> make this function work a HE> little better.
HE> Just dropping the connection seems to be lazy on their part.
HE> They could have made this function better while at it.
HE> H.
HE> Matrosity Tech Support wrote:
no period of time so they can simply open
another connection and keep doing so.
Tom Pepper wrote:
IMail 8.20: After the maximum invalid
recipients are reached, the SMTPD will close the connection.
How long is this IP address denied access to
the server? Is it reset after a period of time?
Thanks,
Tom
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
--
S.J.Stanaitis
Network Administrator, Decorative Product Source
http://www.dpsource.com/
[EMAIL PROTECTED]
(877)-650-8054 x160
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
