We have recently hit problems with someone doing a denial of service on
our servers by opening a few hundred simultaneous connections to our boxes.
I'm considering the idea of having a mechanism for enforcing a maximum
number of connections from a specific IP, however this feels like a
significant change to exim (keeping per connection state in the central
daemon, mopping up when children die etc).
Any comments?
Nigel.
--
[ Nigel.Metheringham@??? - Systems Software Engineer ]
[ Tel : +44 113 207 6112 Fax : +44 113 234 6065 ]
[ Real life is but a pale imitation of a Dilbert strip ]
--
*** Exim information can be found at
http://www.exim.org/ ***
