Hello Sam,
Am 2008-10-26 14:40:22, schrieb Sam Varshavchik:
> Courier will already do pretty well to block most bombs. The combination of
> limiting connections from the same IP address range, and automatic
> tarpitting of SMTP errors, will usually be enough for most cases.
Is there a way limiting the messages coming from one IP/relay per day?
Since some days I become bombed by over 700.000 backscatters now my
78.000 users are bombed...
My Server reject any unknown "local" parts, but I am targeted by someone
which DoS my Server using two dictionaries with french "Firstnames" and
"Familynames" and using any combinations seperated by a DOT.
Currently I have collected over 7000 different "Familynames" and 3500
"Firstnames" and I am not able to stop it...
The problem is, if they hit a valid "local" part, some hours later is
the account bombed with 10-30 messages per hour from all over the world.
Currently they are 1400 users hit by this DoS.
Thanks, Greetings and nice Day/Evening
Michelle Konzack
Systemadministrator
24V Electronic Engineer
Tamay Dogan Network
Debian GNU/Linux Consultant
--
Linux-User #280138 with the Linux Counter, http://counter.li.org/
##################### Debian GNU/Linux Consultant #####################
Michelle Konzack Apt. 917 ICQ #328449886
+49/177/9351947 50, rue de Soultz MSN LinuxMichi
+33/6/61925193 67100 Strasbourg/France IRC #Debian (irc.icq.com)
signature.pgp
Description: Digital signature
------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________ courier-users mailing list [email protected] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
