>Hehe, I always laugh when clients think that spam costs nothing.
>
>Sure, like we can get a server for nothing to handle the network threads,
>and bandwidth is free! LOL
The following isn't that common, but it shows what spammers can do to an MX:
the attacked startd from a Covad ip in Houston and ran until I nulrouted it
between 3 and 4.
Per-Hour Traffic Summary
time received delivered deferred bounced rejected
--------------------------------------------------------------------
0000-0100 36124 1660 91 17 38930 <<
0100-0200 31952 1063 19 17 33093 <<
0200-0300 16438 1109 21 22 18446 <<
0300-0400 5650 1047 16 52 7307
0400-0500 5883 1090 11 24 8740
0500-0600 6213 1035 14 29 7769
0600-0700 7436 1408 10 31 14851
0700-0800 6089 1764 12 28 7521
0800-0900 6703 3059 20 23 9598
0900-1000 6358 3550 15 36 6851
1000-1100 4295 2232 24 46 4301
At 30+ K rejects/hour, the 860 MHz, 412 MByte machine was seeing avg load
of 5 to 8, with mult-second delays for ssh work. versus peak period avg
load of 0.5.
even after nulrouting, the ip kept hammering away:
Internet:
Destination Gateway Flags Refs Use Netif Expire
66.167.89.199 127.0.0.1 UGHS 0 175877 lo0 <<<
The ISP finally ACL'ed at his router.
Len
