The attack was on the list server itself. Found an address
'[EMAIL PROTECTED]' that was looping with the imailsrv alias and
hundreds of undeliverable messages (above address was not valid!) clogging
up the works. Seems the list server was trying to send a bunch of 'illegal
command' or 'help' messages back to the sender. I did not go all the way
back to the original email, needed sleep, instead. Used Find to find all
files in \spool that contained the address (got both the Qs and Ds files)
and removed them, then added the address to the kill file for SMTP (was not
a member of the list yet, so could not kill there and message was to
imailsrv, not a real list).
Daniel Donnelly
________________________________________________________
----- Original Message -----
From: "Len Conrad" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, February 15, 2001 11:51 AM
Subject: Re: [IMail Forum] Limit on the Alias field
>
> >Actually we were under attack that was resolved at about 11:00 last
night.
>
> Attack on the mail server (mail bomb or harvesting?) or on the router
> (ping/syn/icmp flood?)
>
> Len
>
> http://BIND8NT.MEIway.com : Binary for ISC BIND 8.2.3 for NT4 & W2K
>
> http://IMGate.MEIway.com : Build free, hi-perf, anti-spam mail gateways
>
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
