Yeah, DISCARD "gets" the message and then discards it. Uses your bandwidth and resources. You might want to do a REJECT instead.<br><br><div class="gmail_quote">On Fri, Feb 6, 2009 at 3:18 PM, Ken A <span dir="ltr"><<a href="mailto:ka@pacific.net">ka@pacific.net</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div class="Ih2E3d">Max Kipness wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Today I noticed that all of a sudden email was delayed by quite a bit.<br>
When I ran my queue script I realized there were over 7k emails waiting<br>
in the inbound queue. Also when running dmesg, I got:<br>
<br>
<br>
possible SYN flooding on port 25. Sending cookies.<br>
<br>
<br>
This was printed about 20 times.<br>
<br>
<br>
In the maillog, I found tons emails from '<a href="mailto:user@domain.com" target="_blank">user@domain.com</a>', literally.<br>
<br>
<br>
</blockquote>
<br></div>
Yep, seeing that one here too.<br>
Thanks for the heads up.<br>
I'm blocking it now with a 550 error.<br>
Ken<div><div></div><div class="Wj3C7c"><br>
<br>
<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<br>
I've now entered:<br>
<br>
<br>
<a href="mailto:user@domain.com" target="_blank">user@domain.com</a> DISCARD<br>
<br>
<br>
in /etc/mail/access <br>
<br>
This seems to be stopping them for now, but I have thousands in the<br>
incoming still that I guess need to be quarantined as spam yet.<br>
<br>
<br>
Has anybody else seen this? Is this an attack of some sort? Each email<br>
seems to be from a different IP even though they all say they are from<br>
<a href="mailto:user@domain.com" target="_blank">user@domain.com</a>.<br>
<br>
<br>
Max<br>
<br>
<br>
<br>
</blockquote>
<br></div></div><font color="#888888">
-- <br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website! <br>
</font></blockquote></div><br>