last November i was the victim of a ddos. someone at ev1.net sent out many
10s of thousands of emails using an invalid address at my domain as the
return address and i was hammered with bounces and complaints. james doesn't
need to be the target server to be a victim. i think a configurable matcher
that blocked an address at the door would be a good feature.
when i first mentioned this to the list Harmeet sugested the following:
> This may solve your problem
> Change SMTPHandler::doRCPT()
>
> private void doRCPT(String argument) {
> + if ( "<[EMAIL PROTECTED]>".equalsIgnoreCase(argument) ) {
> + out.println("550 Invalid User");
> + out.flush();
> + }
since i am just a user of james i never really figured out what to do with
his suggestion. giving me java code is very similar to giving the owner of a
ford taurus instructions like.....take the steel and heat it until it is in
liquid form then pour it into the cylinder mold...
----- Original Message -----
From: "Steven Job" <[EMAIL PROTECTED]>
To: "James Users List" <[EMAIL PROTECTED]>
Sent: Thursday, August 07, 2003 12:36 PM
Subject: Re: James in production and DOS
>
>
> On Thu, 7 Aug 2003, Serge Knystautas wrote:
>
> > Just finally got around to writing that up yesterday, so glad I could
> > use it so quickly. :)
>
> It's an excellent document. Some of the views I bet are controversal, but
> it does touch on all of the major points that I was thinking about.
>
>
> > If you are getting billed, then that would suck. However, I can't see
> > why someone would send you that many large files. Spammers send smaller
> > messages deferring bandwidth load to externally referenced images.
>
> I am probably more concerned about a DOS attack than spamming.
> There are some strange individuals that get their jollies out of bringing
> other people down. Been at the receiving end of it before for DNS of all
> things. Get a little paranoid at times now.
>
>
> > To date we've relied on iptable or network/hardware support to do this,
> > but it's on some drawing board to support throttling in James. sendmail
> > does it, and we figure we should immitate.
>
> Sounds great. Maybe I could lend a hand someday instead of taking up
> everyone's time answering questions. :-)
>
>
> Thanks again.
> -Steve
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
