[Mimedefang] OT: New Attack/Poor SPAMming programming?

2007-01-11 Thread Ben Kamen
Has anyone noticed this? I'm seeing a lot of open connections in Sendmail like this: sendmail: server 71-10-225-162.dhcp.oxfr.ma.charter.com [71.10.225.162] cmd read They eventually time out... but still... it's consuming connections. any thoughts? -- Ben Kamen

Re: [Mimedefang] OT: New Attack/Poor SPAMming programming?

2007-01-11 Thread David F. Skoll
Ben Kamen wrote: Has anyone noticed this? I'm seeing a lot of open connections in Sendmail like this: sendmail: server 71-10-225-162.dhcp.oxfr.ma.charter.com [71.10.225.162] cmd read Yep. I've set this in sendmail.mc: define(`confTO_COMMAND',`40s') and haven't noticed any ill effects. It

Re: [Mimedefang] OT: New Attack/Poor SPAMming programming?

2007-01-11 Thread Ben Kamen
David F. Skoll wrote: Yep. I've set this in sendmail.mc: define(`confTO_COMMAND',`40s') and haven't noticed any ill effects. It is a DoS waiting to happen, because the default Timeout.command is 1 hour! If you want to kill someone's machine, just open up lots of connections to port 25 and