RE: bombmail

2001-11-29 Thread Charles J. Boening

If you know the source IP, why not block it using ipchains/tables?



-Original Message-
From: IWKW [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, November 28, 2001 10:43 PM
To: [EMAIL PROTECTED]
Subject: bombmail


hi all,

i need help

i'm using qmail with rblsmtpd(ucspi-tcpd)
someone was sent bombmail to my server and qmail can't reject that 
mail

how to set my vpopmail or qmail to automatic reject bombmail??

thanks
paijo









Re: bombmail

2001-11-29 Thread Mate Wierdl

On Thu, Nov 29, 2001 at 01:43:00PM +0700, IWKW wrote:
> hi all,
> 
> i need help
> 
> i'm using qmail with rblsmtpd(ucspi-tcpd)
> someone was sent bombmail to my server and qmail can't reject that 
> mail

This is a qmail(-smtpd) question: you want to use softlimit and the -c
flag for tcpserver.  You will not have rejections, but your system
will not fall over.  Then, as the bombing is going on, put the IP the
bomb is coming from in the tcprules file with `deny'.

Mate



Re: bombmail

2001-11-29 Thread Oliver Etzel

Hello Pajo,

Did you already find a solution on reject bombmail?

> i'm using qmail with rblsmtpd(ucspi-tcpd)
> someone was sent bombmail to my server and qmail can't reject that 
> mail
>