Roman Gelfand wrote: > It looks like somebody is trying to figure out my internal users as > evidenced by log excerpts below. Is there something I could do to, if > not prevent this, reduce it? >
You could use fail2ban to look for too many "RCPT from unknown" entries and block the IP address. ~Seth