Re: Fw: Anonymous Qmail Denial of Service

[johnjohn]

On Wed, Jan 06, 1999 at 09:01:23AM -0000, D. J. Bernstein wrote:
> I've sent a response to bugtraq explaining how to identify the uid that
> filled up the queue.
> 
> My message also explains a much more powerful series of four attacks
> against all MTAs, including the IBM Secure Mailer. These attacks can be
> carried out from anywhere on the Internet, not just the local machine.
> They keep the mail queue flooded for several days.

So...

1) qmail-clean will clean up the files after deciding that they're old
   enough to be garbage

2) DOS is something which has already been granted out as basically
   impossible to protect against in today's environment

3) The resource starvation is not anonymous.

Is that it?

-- 
John White
[EMAIL PROTECTED]
PGP Public Key: http://www.triceratops.com/john/public-key.pgp