On 22 Mar 2005 at 20:02, Greg A. Woods wrote about
"Re: [exim] Exim server behind NAT r":
|...
| You cannot protect your server from several types of potentially
| damaging DoS attacks if you do not at least ensure that it refuses
| connections from clients claiming to be itself (or from other names that
| it is responsible for handling).
Now that's an interesting statement. It seems quite counter-
intuitive to me. ISTM MTAs that do not check for spoofed HELO names
aren't likely to make any use of the HELO name at all.
So what types of DoS attacks require spoofing the recpient MTA's name
on the HELO/EHLO command? Details, please.
- Fred
