>We are having a problem were one of our accounts is constantly being >"tested" to send email through. The password has been changed & now we >have 100's of IP's from all over trying to access this account. I would >ban the IP's but there are too many of them. The log is showing FAILED >authentication [EMAIL PROTECTED]
DDoS are tough. I've seen so many brute force attacks recently that I built reactive blocking into IMGate for smpt/ftp/ssh/http, but even with the block react at 2 failures, there are still 1000s of IPs making only one attempt. Just grimace and bear it and hope the attacked service doesn't die and lock out everybody (and that everybody has good passwords) Another approach is stop looking at your logs! :) Len __________________________________________ www.IMGate.net IMGate Mail Firewall To Unsubscribe: http://imailserver.com/support/discussion_list/ List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://imailserver.com/support/kb.html
