Meridian Mail Reporter 2.0 User’s Guide5 - 12Excessive Thru-Dialer Access AlertThis alert report is used to notify you when the number of after-hours thru-dialeraccesses meets or exceeds a threshold. This report is useful if you suspect that ahacker has compromised your Meridian Mail system and is using thru-dialing froma mailbox or voice service thru-dialer.You can modify the after-hours period by selecting the After Hours command fromthe Maintenance pull-down menu on the MMR Menu Bar, or you can just use thesystem defaults (6:00 p.m. to 6:00 a.m. weekdays, and all day Saturday andSunday) provided with MMR. The report shows after-hours periods where thru-dialaccesses equals or exceeds the threshold.Figure 5-7Excessive Thru-Dialer Access AlertDisplayed Report FieldsDate/Time Period: The date and time period during which the thru-dialingoccurred. The report records after-hours thru-dialing only.Number of Incoming Calls: The number of incoming calls accessing a thru-dialing session.This report is sorted by Date/Time.Analysis and Corrective ActionsDetermine whether the potential hacker activity is through a mailbox or through avoice service thru-dialer. If a hacker is using a mailbox thru-dialer, you should seean unusual number of logons to one or more mailboxes. Check the Excessive After-
