If you run your own mail server then you already know how often attacks occur to either bring it down or lift information off it. Here is a brief description of how Server Shield works on 4 fronts to protect your mail server:

Server Shield

Email Bomb

Email bombs are denial of service attacks where unusually large messages, or an unusually high volume of messages are sent repeatedly. Connection Manager will identify spikes in message volume that violate standard variance in message traffic. Conditions where like messages are sent repeatedly, messages are of particular size characteristics, and the ratio of suspect to valid email is high will result in the classification of an email bomb.

Directory Harvest Attack

A Directory Harvest Attack is a series of delivery attempts that result in 550 errors. Your email server will happily respond to each request, issuing potentially thousands of 550 errors. When the spammer lucks into a valid address, a spam may be delivered, and the address is logged as valid. Once a valid address is located, it can be sold on to list brokers where it is likely to receive huge amounts of unsolicited email.

Virus Outbreak

In the determination of this type of attack, a number of criteria are evaluated. A virus attack is tracked by monitoring both the ratio of virus infected messages to valid email, as well as the total volume of virus infected messages from the IP during a specific interval. If the ratio changes in a statistically significant manner, the IP will be blocked for several hours.

Spam Attack

In the determination of this type of attack, a number of criteria are examined. A spam attack is tracked by monitoring both the ratio of spam to valid email, as well as the total volume of spam from the IP during a specific interval. If the ratio changes in a statistically significant manner, the IP will be blocked for several hours.

In the event that any of the above conditions are met, the source is blocked automatically and prevented from continuing any destructive behaviour on your server.

Included in the Server Shield service is an alert which can notify you in the event of any of the above situations occuring as well as when your server is offline for any reason.

Please contact us on 1300 131 003 or sales@escapenet.com.au to set Server Shield up for your organisation.