[Mimedefang] dictionary attacks looking for a valid user

[Alex Moore]

On Thu, 15 Dec 2005 22:49:20 +0100
Jan Pieter Cornet <johnpc at xs4all.nl> wrote:

> It's tricky. I haven't done this yet but I'm sortof planning to. One
> possibility is to make sure all valid adresses are in virtusertable,
> and all invalid adresses map to some magic token that sendmail
> believes is valid, but really isn't. You could catch the magic token
> in mimedefang and always return a "user unknown" error, and at the
> same time mark that this happened on this connection...

Thanks for all of the great ideas everyone.  I now have some leads to
followup on.

Alex

--