Dictionary Attacks

[Martin Hepworth]

DAve wrote:
> I spoke to soon last week. Staring Friday we came under a heavy old 
> fashioned dictionary attack. Each day from noon until 4pm EDT.
> 
> The IPs are so widely scattered it seems it would do no good to track 
> them. Right now milter-grey is consuming over 50% of my CPUs. If it 
> follows the same course as the prior days, about the time the attack on 
> one server starts to ease up it will increase on the next server.
> 
> Milter-ahead is dealing with the connections that return. It could turn 
> into a DOS with a few thousand more connections. Funny but there are so 
> many connections for non-existant accounts that my load has fallen 
> nearly to the floor. There is no traffic for MailScanner to operate on, 
> the server is so dang busy telling zombies to go away.
> 
> There has to be a better way to make a living than this 8^(
> 
> DAve
> 
Dave

if you've paid for milter-ahead shouldn't it merely reject rctp-to that 
don't exist????

Or is it the sheer number of connections that are killing you?

-- 
Martin Hepworth
Senior Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.	

**********************************************************************