RE: [cobalt-users] How to defend against dictionary attacks?

["Dan Kriwitsky" <list3@xxxxxxxxxxxxxxxxxxxx>]

> >We saw this earlier in the week.  It's an e-mail that's 
> being sent to a
> >large number of common names at a given domain.
> >
> >SSH into your server and look at /var/log/maillog.  Search for the 
> >message
> >number, i3E4xEp08097 in the log snippet above.  The last 
> entry will show 
> >you where the message came from.  Look at the IP address, 
> not the faked 
> >sender name. (I do a backward search in vi to find the last entry.)
> >
> >Regards,
> >
> >         Richard.
> 
> Thanks a million Richard!
> 

I bet when you get the IP if you run it through http://openrbl.org/
you'll find it blacklisted by a number of sites.
-- 
C2003 Dan Kriwitsky

Please reply to the list only. Off list replies are not read.