Is such an SSL attack possible against Postfix?

2010-07-21 Thread Ralf Hildebrandt
http://blog.fefe.de/?ts=b2b8f9f8 sorry, it's in german. I'll translate some bits: Sombody went to Torrent trackers and announced blog.fefe.de:443 as Torrent client (for a really popular download I guess). Thus, blog.fefe.de:443 got flooded with torrent-client traffic on the SSL port. Port 25

RE: Is such an SSL attack possible against Postfix?

2010-07-21 Thread Jonathan Tripathy
Port 25 outgoing will be blocked by most ISPs --- This may be the case in your country, but from where I'm from, I've never had a problem sending out on port 25, even on home

RE: Is such an SSL attack possible against Postfix?

2010-07-21 Thread Gordan Bobic
On Wed, 2010-07-21 at 10:02 +0100, Jonathan Tripathy wrote: Port 25 outgoing will be blocked by most ISPs -- This may be the case in your country, but from where I'm from, I've never had a problem sending out on port 25, even

Re: Is such an SSL attack possible against Postfix?

2010-07-21 Thread Charles Marcus
Jonathan Tripathy wrote: Port 25 outgoing will be blocked by most ISPs This may be the case in your country, but from where I'm from, I've never had a problem sending out on port 25, even on home residental ISPs :) Any ISP that does *not* block port 25 for residential service is a part of

Re: Is such an SSL attack possible against Postfix?

2010-07-21 Thread Daniel V. Reinhardt
- Original Message From: Ralf Hildebrandt ralf.hildebra...@charite.de To: postfix-users@postfix.org Sent: Wed, July 21, 2010 5:00:16 AM Subject: Is such an SSL attack possible against Postfix? http://blog.fefe.de/?ts=b2b8f9f8 sorry, it's in german. I'll translate some bits

RE: Is such an SSL attack possible against Postfix?

2010-07-21 Thread Jonathan Tripathy
Jonathan Tripathy wrote: Port 25 outgoing will be blocked by most ISPs This may be the case in your country, but from where I'm from, I've never had a problem sending out on port 25, even on home residental ISPs :) Any ISP that does *not* block port 25 for residential service is a part of

Re: Is such an SSL attack possible against Postfix?

2010-07-21 Thread Ansgar Wiechers
On 2010-07-21 Daniel V. Reinhardt wrote: From: Ralf Hildebrandt ralf.hildebra...@charite.de To: postfix-users@postfix.org Sent: Wed, July 21, 2010 5:00:16 AM Subject: Is such an SSL attack possible against Postfix? http://blog.fefe.de/?ts=b2b8f9f8 sorry, it's in german. I'll translate

Re: Is such an SSL attack possible against Postfix?

2010-07-21 Thread Wietse Venema
Ralf Hildebrandt: * Ansgar Wiechers li...@planetcobalt.net: The issue with this attack is that it might exhaust CPU resources on the server without having to saturate the bandwidth, due to cryptographic operations required by SSL. Correct. And that it seems to use BitTorrent as a

Re: Is such an SSL attack possible against Postfix?

2010-07-21 Thread Charles Marcus
Jonathan Tripathy wrote: Any ISP that does *not* block port 25 for residential service is a part of the spam/zombie problem, and if yours doesn't, you should complain, loudly if necessary, and encourage them to block it. Every ISP in the UK? Every one that is not, at a bare minimum, closely

RE: Is such an SSL attack possible against Postfix?

2010-07-21 Thread Jonathan Tripathy
I beg to disagree. Blocking port 25 is a violation of Net Neutrality. Ridiculous, net neutrality has nothing to do with service level agreements. Residential service does not in any way, shape or form equate to requiring full SMTP services to be able to run your own full blown mail server, nor

OT: ISP Blocking of port 25 - WAS: Re: Is such an SSL attack possible against Postfix?

2010-07-21 Thread Charles Marcus
On 2010-07-21 11:16 AM, Gordan Bobic gor...@bobich.net wrote: If you want that level of service, upgrade to a service that provides it, and that will be at least minimally monitored for abuse (it is in the ISPs best interest to avoid getting their IP addresses on blacklists). Absolute

Re: Is such an SSL attack possible against Postfix?

2010-07-21 Thread Stan Hoeppner
Charles Marcus put forth on 7/21/2010 7:46 AM: Jonathan Tripathy wrote: Port 25 outgoing will be blocked by most ISPs This may be the case in your country, but from where I'm from, I've never had a problem sending out on port 25, even on home residental ISPs :) Any ISP that does *not*