Getting pounded .. sigh

[Alex Neuman van der Hans]

I think it's called tarpitting. Basically it slows down communications, 
but at the attacker's tcp/ip stack.

Google around for smtp tarpitting or something. If you can't find 
anything I'll look around myself...

sandrews at andrewscompanies.com wrote:
> I remember talk some time ago, not here, of a way to slow down the
> sender by doing something with an ACK (really out of my pond here).
> Anyone know what I might be thinking of?  If there's some way to hold
> the connection to sender open, that would slow them down sending out
> crap. 
>
> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info
> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Doc
> Schneider
> Sent: Monday, May 22, 2006 1:29 PM
> To: MailScanner discussion
> Subject: Re: Getting pounded .. sigh
>
> Dave Strydom wrote:
>   
>> Hi Doc,
>>
>> Doesn't that just create more load/traffic since your machine still 
>> has to accept the tcp connection, take in the data, and then route it 
>> to 127.0.0.1, where as an iptables DROP just igore the packets 
>> completely?
>>
>> Dave
>>     
>
>
> True, but I'm very old school. 8*))
>
> Though, they still are going to generate unwanted traffic/bandwidth even
> to an iptables DROP. Either method works guess pick your poison!
>
> --
> -Doc
> Lincoln, NE.
> http://www.genealogyforyou.com/
> http://www.cairnproductions.com/
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website! 
>
>
>