Getting pounded .. sigh

[Alex Neuman]

sandrews at andrewscompanies.com wrote:
> That was it! 
>
>   
Then be nice and report on your findings, experiences, pitfalls, etc...

Or go all the way and post it in the wiki! :-)
> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info
> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Alex
> Neuman van der Hans
> Sent: Monday, May 22, 2006 2:23 PM
> To: MailScanner discussion
> Subject: Re: Getting pounded .. sigh
>
> I think it's called tarpitting. Basically it slows down communications,
> but at the attacker's tcp/ip stack.
>
> Google around for smtp tarpitting or something. If you can't find
> anything I'll look around myself...
>
> sandrews at andrewscompanies.com wrote:
>   
>> I remember talk some time ago, not here, of a way to slow down the 
>> sender by doing something with an ACK (really out of my pond here).
>> Anyone know what I might be thinking of?  If there's some way to hold 
>> the connection to sender open, that would slow them down sending out 
>> crap.
>>
>> -----Original Message-----
>> From: mailscanner-bounces at lists.mailscanner.info
>> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Doc 
>> Schneider
>> Sent: Monday, May 22, 2006 1:29 PM
>> To: MailScanner discussion
>> Subject: Re: Getting pounded .. sigh
>>
>> Dave Strydom wrote:
>>   
>>     
>>> Hi Doc,
>>>
>>> Doesn't that just create more load/traffic since your machine still 
>>> has to accept the tcp connection, take in the data, and then route it
>>>       
>
>   
>>> to 127.0.0.1, where as an iptables DROP just igore the packets 
>>> completely?
>>>
>>> Dave
>>>     
>>>       
>> True, but I'm very old school. 8*))
>>
>> Though, they still are going to generate unwanted traffic/bandwidth 
>> even to an iptables DROP. Either method works guess pick your poison!
>>
>> --
>> -Doc
>> Lincoln, NE.
>> http://www.genealogyforyou.com/
>> http://www.cairnproductions.com/
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website! 
>>
>>
>>   
>>     
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website! 
>
>
>