MailScanner & DoS

Chris Stone cstone at axint.net
Sat Mar 4 03:01:37 GMT 2006


Try using something like the NJABL_DYNBLOCK rbl to block such cable/dsl users 
from connecting......

On Friday 03 March 2006 07:44 pm, Devon Harding wrote:
> For some reason, I can't seem to stop hackers from performaing DoS against
> my IPCop fw & MailScanner server.  I get alot of these in my
> /var/log/maillog and the boxes get locked up:
>
> Mar  1 20:12:48 mars sendmail[27017]: k220vlXF027017:
> 69-165-202-64.miamfl.adelphia.net [69.165.202.64] did not issue
> MAIL/EXPN/VRFY/ETRN during connection to MTA
> Mar  1 20:12:48 mars sendmail[27019]: k220vmrk027019:
> 69-165-202-64.miamfl.adelphia.net [69.165.202.64] did not issue
> MAIL/EXPN/VRFY/ETRN during connection to MTA
> Mar  1 20:12:48 mars sendmail[27018]: k220vlM8027018:
> 69-165-202-64.miamfl.adelphia.net [69.165.202.64] did not issue
> MAIL/EXPN/VRFY/ETRN during connection to MTA
> Mar  1 20:12:49 mars sendmail[27020]: k220vm8s027020:
> 69-165-202-64.miamfl.adelphia.net [69.165.202.64] did not issue
> MAIL/EXPN/VRFY/ETRN during connection to MTA
> Mar  1 20:12:49 mars sendmail[27023]: k220vngJ027023:
> 69-165-202-64.miamfl.adelphia.net [69.165.202.64] did not issue
> MAIL/EXPN/VRFY/ETRN during connection to MTA
> Mar  1 20:12:49 mars sendmail[27021]: k220vmjG027021:
> 69-165-202-64.miamfl.adelphia.net [69.165.202.64] did not issue
> MAIL/EXPN/VRFY/ETRN during connection to MTA
>
> What can I do?


More information about the MailScanner mailing list