Re: [cobalt-users] How to defend against dictionary attacks?

["PageKeeper Service" <host@xxxxxxxxxxxxxxxxxxxxx>]

Subject: [cobalt-users] How to defend against dictionary attacks?


> Hello All,
>
> I am seeing, what I think are called 'dictionary attacks,' on my mail
> server for users on a regular basis. How can I prevent them, or guard
> against them? My logs are not providing an address to block. I can't tell
> whom is instigating this!
>
> >Apr 14 00:59:14 mail sendmail[8099]: i3E4xEp08099:
<hhb273rdmsxb@xxxxxxxxxx>.
> >.. No such user here
> >Apr 14 00:59:14 mail sendmail[8097]: i3E4xEp08097:
<bernard@xxxxxxxxxx>... No
> >  such user here
> >Apr 14 00:59:14 mail sendmail[8097]: i3E4xEp08097: <louise@xxxxxxxxxx>...
No
> >such user here
>
>
> Please advise.
>
> Thanks,
> Glenn Parsons

Try at the command line:
cat /var/log/maillog | grep 8097
cat /var/log/maillog | grep 8099
or any process number you need to match.

  David Hahn

  PageKeeper Service
  1512 Deborah Road #102
  Rio Rancho, New Mexico 87124 US
  505-892-8723

  http://www.pagekeeperservice.com