Re: SMTP in distributed DOS

[Russ Allbery]

Pavel Kankovsky <[EMAIL PROTECTED]> writes:

> The error message is quite long. In fact, it is probably longer than
> most email addresses, even with additional "rcpt to:". If you send an
> empty message to many bogus recipients (limited only by the amount of
> virtual memory available to qmail-remote), you can get > 100%
> amplification easily (compared to your own network traffic).

100% amplification isn't particularly interesting.  Most of the existing
DoS attacks give you an order of magnitude of amplification or more.

-- 
Russ Allbery ([EMAIL PROTECTED])             <http://www.eyrie.org/~eagle/>