Getting pounded .. sigh

[sandrews at andrewscompanies.com]

That was it! 

-----Original Message-----
From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Alex
Neuman van der Hans
Sent: Monday, May 22, 2006 2:23 PM
To: MailScanner discussion
Subject: Re: Getting pounded .. sigh

I think it's called tarpitting. Basically it slows down communications,
but at the attacker's tcp/ip stack.

Google around for smtp tarpitting or something. If you can't find
anything I'll look around myself...

sandrews at andrewscompanies.com wrote:
> I remember talk some time ago, not here, of a way to slow down the 
> sender by doing something with an ACK (really out of my pond here).
> Anyone know what I might be thinking of?  If there's some way to hold 
> the connection to sender open, that would slow them down sending out 
> crap.
>
> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info
> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Doc 
> Schneider
> Sent: Monday, May 22, 2006 1:29 PM
> To: MailScanner discussion
> Subject: Re: Getting pounded .. sigh
>
> Dave Strydom wrote:
>   
>> Hi Doc,
>>
>> Doesn't that just create more load/traffic since your machine still 
>> has to accept the tcp connection, take in the data, and then route it

>> to 127.0.0.1, where as an iptables DROP just igore the packets 
>> completely?
>>
>> Dave
>>     
>
>
> True, but I'm very old school. 8*))
>
> Though, they still are going to generate unwanted traffic/bandwidth 
> even to an iptables DROP. Either method works guess pick your poison!
>
> --
> -Doc
> Lincoln, NE.
> http://www.genealogyforyou.com/
> http://www.cairnproductions.com/
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website! 
>
>
>   

--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!