Getting pounded .. sigh

Julian Field MailScanner at ecs.soton.ac.uk
Mon May 22 20:41:32 IST 2006


Steve,

Please can you add this to the Wiki? It's a very useful little mine of 
information. Just the link and your contents list of it will do, with 
some links to the original.

Thanks!
Jules.

Stephen Swaney wrote:
> Stephen Swaney
> Fort Systems Ltd.
> stephen.swaney at fsl.com
> www.fsl.com
>
>   
>> -----Original Message-----
>> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
>> bounces at lists.mailscanner.info] On Behalf Of Kevin Miller
>> Sent: Monday, May 22, 2006 2:16 PM
>> To: MailScanner discussion
>> Subject: RE: Getting pounded .. sigh
>>
>> sandrews at andrewscompanies.com wrote:
>>     
>>> I remember talk some time ago, not here, of a way to slow down the
>>> sender by doing something with an ACK (really out of my pond here).
>>> Anyone know what I might be thinking of?  If there's some way to hold
>>> the connection to sender open, that would slow them down sending out
>>> crap.
>>>       
>> I thnk you're thinking of sendmail's greet pause feature.  Works great
>> for "botted" home machines, but real MX hosts aren't tripped up by it.
>> Another feature that may be of some help is the recipient throttle
>> (assuming he's using sendmail - Postfix, etc. probably have something
>> similar) but I'm not using it myself so don't know for sure...
>>
>>
>>
>> ...Kevin
>> --
>>     
>  If you're using sendmail 8.13 look at:
>
> 	http://www.technoids.org/dossed.html 
>
> It's Contents
>
>     * 1. Limiting the Rate of Incoming Connections
>           o 1.1. The ratecontrol Feature
>           o 1.2. The Connection Rate Throttle
>     * 2. Limiting Simultaneous Connections with the conncontrol Feature
>     * 3. Thwarting Dictionary Attacks
>           o 3.1. Limiting the Number of Recipients per Message
>           o 3.2. Reacting to "Bad" Recipients
>     * 4. Blocking Slammers with the greet_pause Feature
>     * 5. Other Ways to Protect Your sendmail Server
>     * 6. Afterword
>
>
> Steve
>
> Stephen Swaney
> Fort Systems Ltd.
> stephen.swaney at fsl.com
> www.fsl.com
>
>   

-- 
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
MailScanner thanks transtec Computers for their support.



More information about the MailScanner mailing list