opensubscriber
   Find in this group all groups
 
Unknown more information…

m : mimedefang@lists.roaringpenguin.com 11 June 2009 • 10:23PM -0400

Re: [Mimedefang] Blocking Dictionary Attacks
by Matt Garretson

REPLY TO AUTHOR
 
REPLY TO GROUP




Petra Humann wrote:
> Do you know the sendmail badrcpt_shutdown patch?
> http://www.jmaimon.com/sendmail/
>
> After an defined number of bad recipients the SMTP session terminates:
> "Possible SMTP RCPT flood, shutting down connection."


I hadn't heard about that patch.  But even without the patch,
you can do basically the same things.  I have this in my
sendmail.mc:

define(`confBAD_RCPT_THROTTLE',`5')dnl

[...]

LOCAL_RULESETS
Scheck_data
# Reject if lots of bad addresses:
R $*            $: $&{nbadrcpts}
R $+            $: $(arith l $@ $1 $@ 8 $)
R FALSE         $# error $@ 5.1.2 $: "553 Too many bad recipients"


I guess this is getting a bit off-topic, though.

-Matt
_______________________________________________
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@list...
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Bookmark with:

Delicious   Digg   reddit   Facebook   StumbleUpon

Related Messages

opensubscriber is not affiliated with the authors of this message nor responsible for its content.