Hi Terry,
It's frustrating posting an item to the list when a user comes
in and says "it's not their problem, your setup is wrong". In this
case, you're posting conflicting information in both your Emails.
Below, you're stating "that's what I said", referring to Imail having
performance issues when malformed posts are sent. Yet in a separate
Email, you stated "IPSWITCH's web server is not vulnerable to code red
so they've done their part in that regard".
Now if the web messaging service shuts down with a LOW number of
posts per/5min period, it's still vulnerable to the posts themselves and
that's what I'm trying to get addressed, and running IIS in any way to
resolve the problem in nonsense, along with running on non-port 80.
-Mark
-----Original Message-----
From: Smart Business Lists [mailto:ourlists@;int04.smartbusiness.net]
Sent: Wednesday, October 23, 2002 4:58 PM
To: Mark McDonald
Subject: Re: [IMail Forum] IWEBMSG: 'no action has been taken'
Wednesday, October 23, 2002 you wrote:
MM> Perhaps you're not familiar with CodeRed or the HTTP protocol
No, I am.
MM> very well, but your statement makes no sense. Code Red is nothing
MM> more than a malformed HTTP post to a webserver. While Imail is not
MM> vulnerable to the attack itself (it never was to begin with, the
MM> attack was made for IIS), it does start having performance issues
MM> when malformed posts are made to the server.
That's what I said.
MM> I'm assuming from your statements that your network is rather small,
MM> our firewall cuts out 90% of the 'junk' coming into our network, but
MM> with almost 90MBPS of traffic coming in, you'll find an in depth
MM> inspection of every packet has considerable network performance
MM> effects and there's a line that needs to be drawn on what's
MM> rejected.
Anything can be DOS'd.
MM> What I can tell you is that we have several software packages
MM> (Imail, IIS, Apache, Statistics software, etc) that are open on the
MM> internet with NO problems, however Imail continues to have these
MM> issues. It's black and white that it is a software-related issue.
I believe that would fall in the realm of opinion.
Look, I don't know why you want to battle on this issue. You seem to
know what the problem is and you seem to understand code red and dos
attacks.
Either way I give up. You win. No more debate from me.
Terry
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
