Hi since you cannot stop it either way (your line will be dead anyway even if you can reduce cpu load on your mail server) what about pulling the plug? Philipp
-----Original Message----- From: Martin Konold [mailto:martin.konold@erfrakon.de] Sent: Saturday, November 02, 2002 11:37 AM To: suse-security@suse.com Subject: Re: [suse-security] DOS on sendmail daemon
On Saturday 02 November 2002 10:17 am, Miguel Albuquerque wrote:
Hi,
Your server is an open relay, close it.
Of course this is the most important action.
Try adding an REJECT access rule for this domain:
ip-170-149-113.xdsl-fixo.ctbcnetsuper.com.br
or his IP/Network:
[200.170.149.113])
Please be very careful with adding reject rules. Basically this leads to blocking many innocent people and is potentially a partial DOS.
(the above address looks to me like a dynamic dial up / DSL number)
Regards, --martin
-- -- Dipl.-Phys. Martin Konold e r f r a k o n Erlewein, Frank, Konold & Partner - Beratende Ingenieure und Physiker Germanenstrasse 15, 70563 Stuttgart, Germany email: martin.konold@erfrakon.de
-- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help@suse.com Security-related bug reports go to security@suse.de, not here