On Tue, Nov 14, 2000 at 08:08:09PM -0000, michael@??? wrote:
> > > 3) Prevent attacks of users sending tons of message just to crash my mail
> > > server.
> >
> > RTFM: smtp_accept_max
> > RTFM: smtp_accept_max_per_host
> > RTFM: queue_run_max
> > RTFM: deliver_load_max
>
> They are very useful to make sure that the machine will not get overloaded
> during regular operation, but I think that application level measures
> really don't have a chance against todays typical attacks. Thanks goodness,
> mail servers are only rarely attacked compared to other targets and it has
> been a long time since I saw people trying to annoy others by huge amounts
> of mail.
But one should keep an eye on the queue and have alarms ring when it
gets bigger than your `usual' one. I have some servers where a queue of
40 is far too big and something is wrong, others where a queue of 10k is
about average. YMMV.
--
Please use PGP when replying to this message
Dr Yann Golanski Internet Systems Developer
PGP: http://www.kierun.org/pgp/key-planet Mailmaster for the Planet Online
