Albert Hopkins <[EMAIL PROTECTED]> wrote:
>
> Is anyone else experiencing this? If I do a netstat on our internet mail
> relay i can see multiple ESTABLISHED pop3 connections from different IP
> addresses from AOL. Being a corporate mail server, I find it difficult to
> believe there are, say 28, people off site using AOL to POP mail.
>
> Is there a solution to these simultaneous connections? I don't see
> anything peculiar in the log files.
One possibility is that some script kiddies are trying password-guessing
attacks against your POP3 server, in the hopes of finding a system
account password.
You can use recordio to log the contents of these suspicious POP3 sessions
if you want.
Charles
--
-----------------------------------------------------------------------
Charles Cazabon <[EMAIL PROTECTED]>
GPL'ed software available at: http://www.qcc.sk.ca/~charlesc/software/
Any opinions expressed are just that -- my opinions.
-----------------------------------------------------------------------
