Getting pounded .. sigh

[Stephen Swaney]

Stephen Swaney
Fort Systems Ltd.
stephen.swaney at fsl.com
www.fsl.com

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> bounces at lists.mailscanner.info] On Behalf Of Kevin Miller
> Sent: Monday, May 22, 2006 2:16 PM
> To: MailScanner discussion
> Subject: RE: Getting pounded .. sigh
> 
> sandrews at andrewscompanies.com wrote:
> > I remember talk some time ago, not here, of a way to slow down the
> > sender by doing something with an ACK (really out of my pond here).
> > Anyone know what I might be thinking of?  If there's some way to hold
> > the connection to sender open, that would slow them down sending out
> > crap.
> 
> I thnk you're thinking of sendmail's greet pause feature.  Works great
> for "botted" home machines, but real MX hosts aren't tripped up by it.
> Another feature that may be of some help is the recipient throttle
> (assuming he's using sendmail - Postfix, etc. probably have something
> similar) but I'm not using it myself so don't know for sure...
> 
> 
> 
> ...Kevin
> --
 If you're using sendmail 8.13 look at:

	http://www.technoids.org/dossed.html 

It's Contents

    * 1. Limiting the Rate of Incoming Connections
          o 1.1. The ratecontrol Feature
          o 1.2. The Connection Rate Throttle
    * 2. Limiting Simultaneous Connections with the conncontrol Feature
    * 3. Thwarting Dictionary Attacks
          o 3.1. Limiting the Number of Recipients per Message
          o 3.2. Reacting to "Bad" Recipients
    * 4. Blocking Slammers with the greet_pause Feature
    * 5. Other Ways to Protect Your sendmail Server
    * 6. Afterword


Steve

Stephen Swaney
Fort Systems Ltd.
stephen.swaney at fsl.com
www.fsl.com