Re: [exim] mail gateway requirements

Pàgina inicial
Delete this message
Reply to this message
Autor: Heiko Schlittermann
Data:  
A: exim-users
Assumpte: Re: [exim] mail gateway requirements
Sujit Acharyya-choudhury <s.choudhury@???> (Fr 03 Jul 2015 11:58:31 CEST):
> We have seen recently two DoS attacks on our mail gateways, but the machines
> and Exim coped well. Our network administrator suggested to block ping, but
> from my previous experience elsewhere it cause some problem - I cannot
> recall exactly what. Any thoughts on this. I know it is Out of Topic.


Blocking Ping (excactly ICMP echo requests) doesn't prevent anything,
except pinging you. If pinging you is a problem, you can ratelimit it
(Linux has some kernel parameter, IPTables is capable of limiting it
too)

Blocking other ICMP traffic that is not related to your
outgoing connections might help a bit.

And yes, as long as there are not more details it's hard to help and
it's hard to understand how it's related to Exim.

    Best regards from Dresden/Germany
    Viele Grüße aus Dresden
    Heiko Schlittermann
-- 
 SCHLITTERMANN.de ---------------------------- internet & unix support -
 Heiko Schlittermann, Dipl.-Ing. (TU) - {fon,fax}: +49.351.802998{1,3} -
 gnupg encrypted messages are welcome --------------- key ID: F69376CE -
 ! key id 7CBF764A and 972EAC9F are revoked since 2015-01 ------------ -