[Mimedefang] Successive Unknown Users

[Jeff Grossman]

on 12/2/02 1:08 PM, Jim McCullars at jim at info.uah.edu wrote:

> 
> 
> On Mon, 2 Dec 2002, Albert E. Whale wrote:
> 
>> Dec  2 14:38:34 access sendmail[30565]: gB2JcSCl030565:
>> <WILLIAMjohn at hky.com>... User unknown
>> 
>> Any suggestions?
> 
>  A new config directive called "confBAD_RCPT_THROTTLE" may help against
> this sort of dictionary attack.  Look in cf/README in your sendmail build
> directory for more information.

I never knew about that directive.  I just set it up and will see what
happens.  I have had a few dictionary attacks in the past week.

Jeff
-- 
Jeff Grossman (jeff at stikman.com)