Where are most of the connections coming from? I had a similar problem until I used the firewall to drastically throttle connections coming from overseas. I was able to throttle large netblocks that were not important to my customers while maintaining relatively easy access for legitimate local email.
Bill On Mon, Oct 6, 2008 at 5:18 PM, Jimmy Spam <[EMAIL PROTECTED]> wrote: > The kind of this attack is open multiple smtp sessions for send spam to > local domains from thousand of different ip's. > > I can't block any port because I need keep on the smtp service. I have > blocked many bad ip's, but it's useless, thousand of new ip's continue > connecting to my server each day... > > I think that even if I was able to close connections in real time, my > server was also overload, because the socket takes some time to be > completely closed and available for new connections. > > I'm fucked. :-( > > > Without knowing the kind of ddos attack there is no way to fight against > > it. > > Please check your logs to find out on which port(s) the attack was. > > > > I use fail2ban script to block password bruteforce attacks. > > > > Best regards > > Christoph > > > > Jimmy Spam schrieb: > >> Hi friends, > >> > >> I'm suffering a DDoS attack since some days ago. I'm becoming mad!!, I > >> can't block it. Block by ip is useless. > >> > >> bastards spammers of hell...!! > >> > >> > >> > >> ______________________________________________________________________ > >> Correo gratis de Pobladores.com > >> Ahora con 25MB de capacidad. > >> http://www.pobladores.com/services/webmail > >> > > > > > > > > ______________________________________________________________________ > Correo gratis de Pobladores.com > Ahora con 25MB de capacidad. > http://www.pobladores.com/services/webmail > -- Bill Uhl GreenLight Networks, LLC [EMAIL PROTECTED] 609-651-5049
