[Mimedefang] dictionary attacks looking for a valid user

Alex Moore asmoore at edge.net
Thu Dec 15 17:44:28 EST 2005


On Thu, 15 Dec 2005 22:49:20 +0100
Jan Pieter Cornet <johnpc at xs4all.nl> wrote:

> It's tricky. I haven't done this yet but I'm sortof planning to. One
> possibility is to make sure all valid adresses are in virtusertable,
> and all invalid adresses map to some magic token that sendmail
> believes is valid, but really isn't. You could catch the magic token
> in mimedefang and always return a "user unknown" error, and at the
> same time mark that this happened on this connection...

Thanks for all of the great ideas everyone.  I now have some leads to
followup on.

Alex

-- 


More information about the MIMEDefang mailing list