namespace mining
Question asked by Binesh Shammunni - 7/30/2020 at 3:10 AM
Unanswered
Support Team

Let me know smartermail implement any name space mining prevention ?  noticed smtp log  hosted domain , try to login via unregistered email 

2020.07.30] 01:04:22.195 [5.188.206.196][62004891] Authenticating as gdifixl@domain.com [2020.07.30] 01:04:22.195 [5.188.206.196][62004891] rsp: 334 UGFzc3dvcmQ6 [2020.07.30] 01:04:23.894 [5.188.206.196][62004891] Authentication failed - login failed [2020.07.30] 01:04:23.895 [5.188.206.196][62004891] rsp: 535 Authentication failed [2020.07.30] 01:04:24.478 [5.188.206.196][62004891] disconnected at 7/30/2020 1:04:24 AM 

Let me know how to control the above login attempt

Thanks
Binesh

2 Replies

Reply to Thread
1
Urs Replied
Hello Binesh

I have set Settings - Security - IDS rules to lower values on these two rules
- Bad SMTP Sessions (Harvesting) 
- Password Brute Force by Protocol 

and Settings - Security - SMTP Blocks a new rule
EHLO Domain
USER
Bad SMTP Sessions

For now is already much better for me
1
Binesh Shammunni Replied
Hello Urs 

Already configure the setup 5 minutes , 10 threshold,  block period 6000 minutes.  Let me know change anything beyond the level 

Thanks 
Binesh



Reply to Thread