[Mimedefang] Strange activity

[David F. Skoll]

Les Mikesell wrote:

> I'm seeing some dictionary attacks but they all complete normally.
> Maybe this location just has a routing problem to some large
> chunk of the internet.

Unlikely.  Lots of normal mail is flowing fine from all over the place.
And the TCP three-way handshake is completing normally and quickly.
If there were routing problems, I wouldn't expect so many connections
to even be able to establish themselves.

And I don't think it's a bad firewall rule, because as I said, lots
of normal mail is flowing just fine.

Regards,

David.