[Mimedefang] Somewhat OT: Dictionary attacks

[Brett Simpson]

On Wednesday 09 June 2004 12:23 pm, Ben Kamen wrote:
> How many bad recipients is acceptable? I have my throttling set at 2.

I'm throttling at 2 also.

> David F. Skoll wrote:
> > Hi,
> >
> > Are MIMEDefang list denizens seen a huge increase in dictionary attacks?
> > I know I am.
> >
> > Below is a shell script I run from cron every 5 minutes to firewall off
> > hosts doing harvesting.  It's Linux-specific, but can easily be
> > adapted for other systems.

The script ran with one error where "Possible" was used instead of an IP 
address.


/sbin/iptables -A harvest_abusers --source Possible -j harvest_log

Jun  9 06:34:01 ns2b sendmail[26030]: i59AXutH026030: [220.123.204.97]: 
Possible SMTP RCPT flood, throttling.

Brett
-------------- next part --------------


------------------------------------------------------
SPAM filtering options: Spam is defined as unsolicited commercial email.
------------------------------------------------------
ITS has provided the following optional links to train our Anti-Spam system.
If the subject contains a "___" then this email was identified as possible Spam.

If you wish to identify this email as SPAM then click here.
Spam:        http://ns1b.hillsboroughcounty.org/canit/b.php?c=s&i=25094&m=157ab5cf154f

If you wish to identify this email as not being Spam then click here.
Not spam:    http://ns1b.hillsboroughcounty.org/canit/b.php?c=n&i=25094&m=157ab5cf154f
------------------------------------------------------