Irwan Hadi <[EMAIL PROTECTED]> wrote:

>I installed qmail based on LWQ howto. The init script from LWQ doesn';t
>contain any ulimit -v 2048 for example.
>Should I put the ulimit command manually, to protect the qmail box from DoS
>attack or not ?
>Or supervise can do it automatically ?

No need. The /var/qmail/supervise/qmail-smtpd/run script sets a limit
with "softlimit":

#!/bin/sh
QMAILDUID=`id -u qmaild`
NOFILESGID=`id -g qmaild`
exec /usr/local/bin/softlimit -m 2000000 \
    /usr/local/bin/tcpserver -v -p -x /etc/tcp.smtp.cdb \
        -u $QMAILDUID -g $NOFILESGID 0 smtp /var/qmail/bin/qmail-smtpd 2>&1

-Dave

Reply via email to