Re: [Declude.JunkMail] [OT] Drop Connection On First Invalid User

2006-03-27 Thread Greg Evanitsky


On Mar 26, 2006, at 2:22 PM, Goran Jovanovic wrote:


How are you going to drop the SMTP connection on the first or second
invalid recipient?



In Imail.

http://support.ipswitch.com/kb/IM-20050831-DM01.htm

BTW, the support page says it works in 8.1+ but didn't for me.  
Upgraded to 8.22, works perfectly.


Thanks,

Greg Evanitsky
ACS, Inc.

(717) 248-2720 ext. 5113


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] [OT] Drop Connection On First Invalid User

2006-03-27 Thread Marc Catuogno
I don't have the key referred to in the KB article.

I even did a search through my reg for MaxInvalid in case I was looking in
the wrong place and got nothing.  I am running 8.22 with Declude.  

Does the addition of Declude make a difference?


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Greg Evanitsky
Sent: Monday, March 27, 2006 9:00 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] [OT] Drop Connection On First Invalid User


On Mar 26, 2006, at 2:22 PM, Goran Jovanovic wrote:

 How are you going to drop the SMTP connection on the first or second
 invalid recipient?


In Imail.

http://support.ipswitch.com/kb/IM-20050831-DM01.htm

BTW, the support page says it works in 8.1+ but didn't for me.  
Upgraded to 8.22, works perfectly.

Thanks,

Greg Evanitsky
ACS, Inc.

(717) 248-2720 ext. 5113


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]



---
[This E-mail scanned for viruses by Declude Virus]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] [OT] Drop Connection On First Invalid User

2006-03-27 Thread JR Tatum
Marc,

You have to add the DWORD key (MaxInvalidRCPTsPerSession) to
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SMTPD32\Parameters 

We use a value of 2.


JR
 
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Marc Catuogno
Sent: Monday, March 27, 2006 10:36 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] [OT] Drop Connection On First Invalid
User

I don't have the key referred to in the KB article.

I even did a search through my reg for MaxInvalid in case I was
looking in the wrong place and got nothing.  I am running 8.22 with
Declude.  

Does the addition of Declude make a difference?


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Greg Evanitsky
Sent: Monday, March 27, 2006 9:00 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] [OT] Drop Connection On First Invalid
User


On Mar 26, 2006, at 2:22 PM, Goran Jovanovic wrote:

 How are you going to drop the SMTP connection on the first or second 
 invalid recipient?


In Imail.

http://support.ipswitch.com/kb/IM-20050831-DM01.htm

BTW, the support page says it works in 8.1+ but didn't for me.  
Upgraded to 8.22, works perfectly.

Thanks,

Greg Evanitsky
ACS, Inc.

(717) 248-2720 ext. 5113


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
unsubscribe Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]



---
[This E-mail scanned for viruses by Declude Virus]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
unsubscribe Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] [OT] Drop Connection On First Invalid User

2006-03-27 Thread Greg Evanitsky


On Mar 27, 2006, at 10:36 AM, Marc Catuogno wrote:


I don't have the key referred to in the KB article.


You'll need to manually add it to the registry (I had to also).  
Declude has nothing to do with it.


Thanks,

Greg Evanitsky
ACS, Inc.

(717) 248-2720 ext. 5113


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] [OT] Drop Connection On First Invalid User

2006-03-27 Thread Craig Edmonds
Does anyone know if this actually works on IMAIL 8.11? 

I notice Greg said it didn't work for him but I was just wondering.

Kindest Regards
Craig Edmonds
123 Marbella Internet
W: www.123marbella.com
E : [EMAIL PROTECTED]
 
Marbella Guide Web Portal
W: www.marbellaguide.com
E: [EMAIL PROTECTED]
 
=


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of JR Tatum
Sent: Monday, March 27, 2006 5:46 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] [OT] Drop Connection On First Invalid User

Marc,

You have to add the DWORD key (MaxInvalidRCPTsPerSession) to
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SMTPD32\Parameters 

We use a value of 2.


JR
 
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Marc Catuogno
Sent: Monday, March 27, 2006 10:36 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] [OT] Drop Connection On First Invalid User

I don't have the key referred to in the KB article.

I even did a search through my reg for MaxInvalid in case I was looking in
the wrong place and got nothing.  I am running 8.22 with Declude.  

Does the addition of Declude make a difference?


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Greg Evanitsky
Sent: Monday, March 27, 2006 9:00 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] [OT] Drop Connection On First Invalid User


On Mar 26, 2006, at 2:22 PM, Goran Jovanovic wrote:

 How are you going to drop the SMTP connection on the first or second 
 invalid recipient?


In Imail.

http://support.ipswitch.com/kb/IM-20050831-DM01.htm

BTW, the support page says it works in 8.1+ but didn't for me.  
Upgraded to 8.22, works perfectly.

Thanks,

Greg Evanitsky
ACS, Inc.

(717) 248-2720 ext. 5113


---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]



---
[This E-mail scanned for viruses by Declude Virus]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.
[ This E-mail has been scanned for Spam and Viruses by Declude ] [ Thank You
For Using 123 Marbella Internet ]




[ This E-mail has been scanned for Spam and Viruses by Declude ]
[ Thank You For Using 123 Marbella Internet ]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] [OT] Drop Connection On First Invalid User

2006-03-27 Thread Greg Evanitsky


On Mar 27, 2006, at 11:16 AM, Craig Edmonds wrote:


Does anyone know if this actually works on IMAIL 8.11?

I notice Greg said it didn't work for him but I was just wondering.


I was using 8.14 or 8.15 when it didn't work for me. Upgraded to 8.22  
and it worked, but now thinking back I don't remember if I shutdown/ 
restarted Imail or restarted the server after making the addition to  
the registry (I was under a VERY heavy attack!). Nothing bad happened  
when it didn't work for me so I'd suggest you add the key, shutdown/ 
restart Imail and see what happens. Maybe you can prove I did  
something wrong and other people running 8.1 won't need to upgrade to  
get that feature.


Thanks,

Greg Evanitsky
ACS, Inc.

(717) 248-2720 ext. 5113


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] [OT] Drop Connection On First Invalid User

2006-03-27 Thread John Doyle
I have a vague recollection of this being first available on 8.20.
A search of the ipswitch imail forum might produce an accurate version
number.
John

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Craig Edmonds
Sent: Monday, March 27, 2006 8:16 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] [OT] Drop Connection On First Invalid
User
Importance: High


Does anyone know if this actually works on IMAIL 8.11?

I notice Greg said it didn't work for him but I was just wondering.

Kindest Regards
Craig Edmonds
123 Marbella Internet
W: www.123marbella.com
E : [EMAIL PROTECTED]

Marbella Guide Web Portal
W: www.marbellaguide.com
E: [EMAIL PROTECTED]

=


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of JR Tatum
Sent: Monday, March 27, 2006 5:46 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] [OT] Drop Connection On First Invalid User

Marc,

You have to add the DWORD key (MaxInvalidRCPTsPerSession) to
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SMTPD32\Parameters

We use a value of 2.


JR

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Marc Catuogno
Sent: Monday, March 27, 2006 10:36 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] [OT] Drop Connection On First Invalid User

I don't have the key referred to in the KB article.

I even did a search through my reg for MaxInvalid in case I was looking in
the wrong place and got nothing.  I am running 8.22 with Declude.

Does the addition of Declude make a difference?


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Greg Evanitsky
Sent: Monday, March 27, 2006 9:00 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] [OT] Drop Connection On First Invalid User


On Mar 26, 2006, at 2:22 PM, Goran Jovanovic wrote:

 How are you going to drop the SMTP connection on the first or second
 invalid recipient?


In Imail.

http://support.ipswitch.com/kb/IM-20050831-DM01.htm

BTW, the support page says it works in 8.1+ but didn't for me.
Upgraded to 8.22, works perfectly.

Thanks,

Greg Evanitsky
ACS, Inc.

(717) 248-2720 ext. 5113


---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]



---
[This E-mail scanned for viruses by Declude Virus]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.
[ This E-mail has been scanned for Spam and Viruses by Declude ] [ Thank You
For Using 123 Marbella Internet ]




[ This E-mail has been scanned for Spam and Viruses by Declude ]
[ Thank You For Using 123 Marbella Internet ]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] [OT] Drop Connection On First Invalid User

2006-03-27 Thread Goran Jovanovic
This will obviously work for domains that are hosted on IMAIL but I am
sure that it cannot work with gatewayed domains as there is no user info
(assuming no aliases etc). 

So if you are gatewaying some domains and hosting some domains then this
parameter should have an effect on the hosted domains but no effect on
the gatewayed ones. 

Correct?

Thanks

Goran Jovanovic
Omega Network Solutions

 

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
 [EMAIL PROTECTED] On Behalf Of Greg Evanitsky
 Sent: Monday, March 27, 2006 9:00 AM
 To: Declude.JunkMail@declude.com
 Subject: Re: [Declude.JunkMail] [OT] Drop Connection On First Invalid
User
 
 
 On Mar 26, 2006, at 2:22 PM, Goran Jovanovic wrote:
 
  How are you going to drop the SMTP connection on the first or second
  invalid recipient?
 
 
 In Imail.
 
 http://support.ipswitch.com/kb/IM-20050831-DM01.htm
 
 BTW, the support page says it works in 8.1+ but didn't for me.
 Upgraded to 8.22, works perfectly.
 
 Thanks,
 
 Greg Evanitsky
 ACS, Inc.
 
 (717) 248-2720 ext. 5113
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] [OT] Drop Connection On First Invalid User

2006-03-26 Thread Goran Jovanovic
Darrell,

How are you going to drop the SMTP connection on the first or second
invalid recipient?

Goran Jovanovic
Omega Network Solutions

 
 -Original Message-
 From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
 [EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED])
 Sent: Thursday, March 23, 2006 12:56 PM
 To: Declude.JunkMail@declude.com
 Subject: [Declude.JunkMail] [OT] Drop Connection On First Invalid User
 
 Is anyone dropping the smtp connection on the first invalid user?
Anyone
 see a downside to this?  If the message has multiple recipients (even
ones
 that are valid) they will receive a notice saying the message was not
 delivered.
 
 Thoughts?
 Darrell
 
  ---
 Check out http://www.invariantsystems.com for utilities for Declude,
 Imail,
 mxGuard, and ORF.  IMail/Declude Overflow Queue Monitoring, SURBL/URI
 integration, MRTG Integration, and Log Parsers.
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] [OT] Drop Connection On First Invalid User

2006-03-26 Thread Darrell \([EMAIL PROTECTED])

Through an IIS event sink.

Darrell

Check out http://www.invariantsystems.com for utilities for Declude And 
Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG 
Integration, and Log Parsers.


- Original Message - 
From: Goran Jovanovic [EMAIL PROTECTED]

To: Declude.JunkMail@declude.com
Sent: Sunday, March 26, 2006 2:22 PM
Subject: RE: [Declude.JunkMail] [OT] Drop Connection On First Invalid User


Darrell,

How are you going to drop the SMTP connection on the first or second
invalid recipient?

Goran Jovanovic
Omega Network Solutions



-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED])
Sent: Thursday, March 23, 2006 12:56 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] [OT] Drop Connection On First Invalid User

Is anyone dropping the smtp connection on the first invalid user?

Anyone

see a downside to this?  If the message has multiple recipients (even

ones

that are valid) they will receive a notice saying the message was not
delivered.

Thoughts?
Darrell

 ---
Check out http://www.invariantsystems.com for utilities for Declude,
Imail,
mxGuard, and ORF.  IMail/Declude Overflow Queue Monitoring, SURBL/URI
integration, MRTG Integration, and Log Parsers.
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] [OT] Drop Connection On First Invalid User

2006-03-23 Thread Greg Evanitsky


On Mar 23, 2006, at 12:55 PM, Darrell  
(([EMAIL PROTECTED])) wrote:


Is anyone dropping the smtp connection on the first invalid user?   
Anyone see a downside to this?  If the message has multiple  
recipients (even ones that are valid) they will receive a notice  
saying the message was not delivered.

Thoughts?


We drop after the second invalid user. One could be an accident, two  
is a pattern.


We had over 14,000 invalid users attempts yesterday from  
216.79.155.*. Imail SMTP access control list today for that subnet.  
If the denied numbers are big during the next few days, blockage at  
our main router is the next/final step.


Thanks,

Greg Evanitsky
ACS, Inc.

(717) 248-2720 ext. 5113


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.