Re: [swinog] smtp attacks

2006-11-27 Diskussionsfäden Daniel Lorch
Hi The problem was made worse by the fact that we had left the response code for a reject due to unknown recipient as 4xx, so naturally one of these emails resulted in many connection attempts if they came from a real mail server (as opposed to a zombie). At one point we were up to 500

Re: [swinog] smtp attacks

2006-11-27 Diskussionsfäden Daniel Kamm
On Mon, 2006-11-27 at 17:58 +0100, Rene Luria wrote: It is due to bounces coming from everywhere. Spamers using fake email addresses from domains for which we are the MX. The amount of such emails (which we almost all reject, user unknown, etc.. because of the fake email addresses) is

Re: [swinog] smtp attacks

2006-11-27 Diskussionsfäden Michael Naef
On Monday 27 November 2006 20:43, Daniel Kamm wrote: Graylisting possibly helps as well. Graylsiting screws up the system E-Mail and doesn't help if the other end is a regular mailserver (cracked useraccount...). I think the only long-term reliable means to the solution of this problem

Re: [swinog] smtp attacks

2006-11-27 Diskussionsfäden Matthias Hertzog
_ - Original Message - From: Rene Luria [EMAIL PROTECTED] To: swinog@swinog.ch; [EMAIL PROTECTED] Sent: Monday, November 27, 2006 5:58 PM Subject: [swinog] smtp attacks Hi folks, We are currently experiencing a heavy load on all our smtp inbound servers since saturday

Re: [swinog] smtp attacks

2006-11-27 Diskussionsfäden Daniele Guazzoni
_ - Original Message - From: Rene Luria [EMAIL PROTECTED] To: swinog@swinog.ch; [EMAIL PROTECTED] Sent: Monday, November 27, 2006 5:58 PM Subject: [swinog] smtp attacks Hi folks, We are currently experiencing a heavy load on all our smtp inbound servers since saturday. It is due