man, 2003-01-27 kl. 20:06 skrev John W Baxter:
> They're back, this time from 24.158.245.8. And a different envelope sender
> local part pattern (sample):
> okaaaa:rp
> Exim logs the : as a syntax error. This one slowed our mail system enough
> that it triggered an alert from our round trip mail monitor, letting me see
> it in action. Same netblock as before. Sigh.
Firewall rule? Linux's Netfilter (2.4 and above) can cope with this sort
of thing beautifully - not more than that many new smtp connections per
time period, then block.
Best,
Tony
--
Tony Earnshaw
When all's said and done ...
there's nothing left to say or do.
e-post: tonni@???
www: http://www.billy.demon.nl
