4 msgRewriting To: field for outbound messages
13 msgMy server send e-mails that are considered SPAM
6 msgWeb Based Front End - Update
2 msgmailman subdomain not recognized by some mail s...
14 msgTrying to feed an script with an email
5 msgQ: smtpd_recipient_restrictions w/reject_unlist...
2 msgQuestion about recipient canonical rewrite and ...
3 msgQQ regarding server performance impact when doi...
1 msgRe: qshape and greylisting
4 msgAddress Verification Question

Distributed mailbombing on one address
\ Frank Bonnet (28 Mar 2008)
. \ Terry Carmen (28 Mar 2008)
. . \ Terry Carmen (28 Mar 2008)
. \ Jorey Bump (28 Mar 2008)
. . \ Frank Bonnet (28 Mar 2008)
. . . \ mouss (28 Mar 2008)
. . . . \ Kelvin Smith (28 Mar 2008)
. \ (Wietse Venema) (28 Mar 2008)

2 msgTrouble with postmaster alias
5 msgParent domains confusion?
2 msgAnti-virus scanning with Postfix & Mac OS X
2 msgFolder Structure help
8 msgqmgr_active_corrupt
3 msgretiring a mail server
2 msgSMTP verification
9 msgMultiple IPs
2 msgControlling out going messages
Subject:Distributed mailbombing on one address
Group:Postfix-users
From:Frank Bonnet
Date:28 Mar 2008


 
Hello

The mailbox of a user here is literally mailbombed ( ~ 4 mails / seconds )
I have checked into email syslog and it appears the attack seems distrinuted
and comes from dozens of randoms servers ...

I have setup a new account for the user but the attack still continues.

For now I have aliased the attacked address to /dev/null but I wonder
what would be the most efficient (which generate the smalest load of the server)
method to refuse/discard emails for this address ?

Thanks a lot





© 2004-2008 readlist.com