Just ping can cause DOS attack by Ping flooding.  So if not needed for mail 
gateway, we can disable ping on our mail gateways. 

Regards

Sujit

-----Original Message-----
From: Exim-users [mailto:[email protected]] On 
Behalf Of Marc Haber
Sent: 03 July 2015 17:02
To: [email protected]
Subject: Re: [exim] mail gateway requirements

On Fri, 3 Jul 2015 14:26:11 +0000, Paul Havinden
<[email protected]> wrote:
>>On 03.07.2015 11:58, Sujit Acharyya-choudhury wrote:
>>> We have seen recently two DoS attacks on our mail gateways, but the
>>> machines and Exim coped well.  Our network administrator suggested to
>>> block ping, but from my previous experience elsewhere it cause some
>>> problem - I cannot recall exactly what.  Any thoughts on this.  I know it 
>>> is Out of Topic.
>>You mentioned that you suspected DOS attack on your mail gateway previously 
>>but never provided any >details. I suspected some major misconfiguration on 
>>your side, like running an open relay or a policy of >accept-then-bounce, 
>>which would be very serious issues that have to be solved.
>
>>I you don't want to disclose any details on this list, you should consider 
>>hiring external consulting.
>
>We block pings to out mail servers and it's doesn’t appear to cause any issues.

And what does it help?

Greetings
Marc
-- 
-------------------------------------- !! No courtesy copies, please !! -----
Marc Haber         |   " Questions are the         | Mailadresse im Header
Mannheim, Germany  |     Beginning of Wisdom "     | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Attachment: smime.p7s
Description: S/MIME cryptographic signature

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Reply via email to