Page 1 of 1

Howto block brute force attack from EHLO ylmf-pc

Posted: Tue Jun 03, 2014 3:57 am
by afung
Our Mailenable mail server has been constantly attacked from multiple sources of EHLO ylmf-pc( it is reaching 100-200 attacks per day), mailenable support suggest us to install magicSpam to block attacks from specific computer s with special EHLO response.

This EHLO ylmf-pc attack is by SMTP authentication attack and try to log into some of our user's mail account. Mailenable does provide some protection as if the failed attempt reach 10 times it will lock up that user mailbox, but it is causing lots of inconvinence to the affected users.

Just install MagicSpam on our mailenable mail server but can not find how to set up to block such attack. All these attacks re with same EHLO response of "EHLO ylmf-pc" but IP address do varies every time.

Many thanks

andrew

Re: Howto block brute force attack from EHLO ylmf-pc

Posted: Tue Jun 03, 2014 12:20 pm
by magicspam
Hello Andrew,

MagicSpam is designed as an anti-spam solution and not as a brute-force protection system. While MagicSpam does perform several HELO level checks, we do not at this time have a HELO blacklist feature.

How have your experiences been so far with MagicSpam in regards to its anti-spam performance? If you have any questions specific to this we would be happy to assist!

MagicSpam Support