Email Dictionary Attacks in MTA MODE?! (IMAP port 587 connections in MTA MODE displaying Sophos IP for source, not Attackers!)
How do we make XG report Public address of IMAP/SMTP/POP connections when in MTA mode?
This week I had to deal with a Dictionary attacker probing our mail server for valid accounts about 20-30 per minute. The logs on the mail server were woefully inadequate…