Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » False detection of directory harvest attack
  •  
rwodaski

Messages: 1
Karma: 0
Send a private message to this user
I am generating email from an .ASP page using JMail:

JMail.Send("localhost")

Kerio Mail Server says:

<- 421 4.4.5 Directory harvest attack detected
localhost failed with the message: "421 4.4.5 Directory harvest attack detected"

I can't find anything in the Help files that will tell me how to prevent this logjam. How does the mailserver detect this attack, and what can I do to prevent this false detection?


Ron Wodaski
  •  
wannes

Messages: 18
Karma: 0
Send a private message to this user
Could it be that you have the default Spam Greeting delay enabled ? Try to lower the value from 25 to 10.
  •  
MarkK

Messages: 454
Karma: 46
Send a private message to this user
In Kerio, click on the SMTP SERVER link on the left side, and then the SECURITY OPTIONS tab. Look at the "Max number of unknown recipients (directory harvest attack protection):" setting. This means that after {Setting#} number of bad email addresses that the server has received, the email is considered to be an attempt to find good email addresses by sorting out the returned bad-address notices received from your Kerio server.

Check that you don't have that number set to low. Also check what email addresses you are sending to, that they are valid ones.
Previous Topic: Mailing List Posting / Denial
Next Topic: Archiving Device for Mail Hoarders
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Thu Oct 19 01:47:35 CEST 2017

Total time taken to generate the page: 0.00342 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.