[Mimedefang] Somewhat OT: Dictionary attacks

[Brett Simpson]

On Wednesday 09 June 2004 12:23 pm, Ben Kamen wrote:
> How many bad recipients is acceptable? I have my throttling set at 2.

I'm throttling at 2 also.

> David F. Skoll wrote:
> > Hi,
> >
> > Are MIMEDefang list denizens seen a huge increase in dictionary attacks?
> > I know I am.
> >
> > Below is a shell script I run from cron every 5 minutes to firewall off
> > hosts doing harvesting.  It's Linux-specific, but can easily be
> > adapted for other systems.

The script ran with one error where "Possible" was used instead of an IP 
address.


/sbin/iptables -A harvest_abusers --source Possible -j harvest_log

Jun  9 06:34:01 ns2b sendmail[26030]: i59AXutH026030: [220.123.204.97]: 
Possible SMTP RCPT flood, throttling.

Brett
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: CANIT-VOTING-LINKS-25094-157ab5cf154f.txt
URL: <https://lists.mimedefang.org/pipermail/mimedefang_lists.mimedefang.org/attachments/20040609/e813f96f/attachment.txt>