another .map or
an ipfw rule)
-Original Message-
From: Scot Desort [mailto:[EMAIL PROTECTED]
Sent: Saturday, November 15, 2003 3:37 PM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Dictionary attacks and Postfix
Over the last week, as we moved one of our larger email domains over
Subject: RE: [Declude.JunkMail] Dictionary attacks and Postfix
Little OT for this list, but anyone using postfix as a gateway should have
this setup by now!
http://www.smartbusiness.net/imail/
Use the above utility to export your userlist from IMAIL to a test file
every few minutes.
I have
Scot Desort wrote:
I could be wrong. Perhaps I don't have a full understanding of how address
harvesting works. Perhaps the harvesting software is smart enough to know
that if 100% of the attacked addresses are accepted, that there must be a
relay server in front of the true destination server,
Yes. Soil-tech.com is a local domain that we host and Tony is a valid
user on that domain. It almost appears that Imail is seeing his
OutlookExpress as a mail server, not a authenticated mail client.
Any other suggestions?
In this case, I would suggest using the debug mode to track the
problem.
702.319.4349
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Saturday, October 11, 2003 5:37 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Dictionary attacks --- anyone have any
solutions.
I have
I have a customer using Outlook Express 6 and each message he sends
fails the HELOBOGUS test as shown below:
10/10/2003 14:45:30 Q28770c310140cd76 Msg failed HELOBOGUS (Domain TONY
has no MX or A records.). Action=HEADER.
10/10/2003 14:45:30 Q28770c310140cd76 From: [EMAIL PROTECTED] To:
[EMAIL
We are constantly getting hammered with dictionary attacks. Does anyone
have any solutions? Does the new version of Imail address this issue?
Whenever I check a lot of it comes from open proxies.
Blocking the IPs is not a solution. Any ideas are appreciated.
Chuck Schick
Warp 8, Inc.
We are constantly getting hammered with dictionary attacks. Does anyone
have any solutions? Does the new version of Imail address this issue?
Whenever I check a lot of it comes from open proxies.
Blocking the IPs is not a solution. Any ideas are appreciated.
Blocking the IPs is the only
I use BlackIce server.
Give me an idea as to what to look for and I will tell you if it is working.
Fred
- Original Message -
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, October 10, 2003 12:23 PM
Subject: Re: [Declude.JunkMail] Dictionary attacks
Schick
Warp 8, Inc.
303-421-5140
www.warp8.com
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry
Sent: Friday, October 10, 2003 10:24 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Dictionary attacks --- anyone have any
solutions
for queries so all entries are not always entered.
Regards,
Kami
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Chuck Schick
Sent: Friday, October 10, 2003 1:03 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Dictionary attacks --- anyone have
I have seen talk on the Imail Forum about people attempting to script
something to combat Dictionary Attacks by blocking IPs that send over too
many RCPT TO commands that result in ERR invalid user.
Scott, is this something Declude will eventually handle for us? Or is
there anything out
Bill,
Monday, September 16, 2002 you wrote:
BB I have seen talk on the Imail Forum about people attempting to
BB script something to combat Dictionary Attacks by blocking IPs that
BB send over too many RCPT TO commands that result in ERR invalid
BB user.
I wrote such a program that is
stuff to Imail through an alternate SMTP port.
Bill
-Original Message-
From: Smart Business Lists
Sent: Tue, 17 Sep 2002 08:47:46 -0500
Subject: Re: [Declude.JunkMail] dictionary attacks
Bill,
Monday, September 16, 2002 you wrote:
BB I have seen talk on the Imail Forum about people
Yesterday we recorded dictionary attack(s) from 42 different IP's.
For the most part these were in different network ranges.
Most attempts tried 24 addresses but several were fewer and 3 were
more. Sometimes 10 or 15 minutes between attack and later in the day
maybe an hour.
Can't say if it
: Friday, August 16, 2002 5:15 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] dictionary attacks
Yesterday we recorded dictionary attack(s) from 42 different IP's.
For the most part these were in different network ranges.
Most attempts tried 24 addresses but several were fewer and 3 were
more
16 matches
Mail list logo
