* Greg Moeller <[EMAIL PROTECTED]> [010403 18:11]:
> We were just 'gifted' by some lovely Email from a fellow who wished our users
> to have university degree in a few weeks.
> The header on his Email looks like:
> From: <>
> Bcc:
> Subject: You have been accepted!
> Date: Mon, 15 May 2000 05:39:36 -0400 (EDT)
>
> Is an utterly null From line allowed?
Yes. And that's a good idea: bounces usually have <> as the sender, so
that double-bounces (and so forth) can be avoided...
> This is with a standard 1.03 Qmail.
> From a normal modem, this guy has managed to get our queue to:
> bash-2.02# /var/qmail/bin/qmail-qstat
> messages in queue: 83261
> messages in queue but not yet preprocessed: 4
> (and this is with a rather powerful multi processor sparc)
>
> What can be done about this sort of thing? It's really annoying that one
> idiot with a modem can destroy a rather large Qmail system.
> (dual processor ultrasparc, 512Meg RAM, 50Gig RAID)
> (yes, I lock out his IP, but he just dials in and gets another one)
Stock qmail really can't do anything about this, except temporarily block
his ISP's entire netblock (putting the entire class C- or B-net into the
tcprules file). There are pathes on www.qmail.org that will allow finer
measures, such as tarpitting, maxrecipients et al.
-Johan
--
Johan Almqvist
http://www.almqvist.net/johan/qmail/
PGP signature
