Re: SMTP server account probing

From: Jose C. Oon (kornat_private)
Date: Tue Mar 09 1999 - 17:18:25 PST

  • Next message: Toomas Soome: "64 bit Solaris 7 procfs bug"

    .....snip.....
    > Unfortunately, the program was designed to defeat the "goaway" option by
    > using RCPT TO: commands instead of VRFY commands. What's needed is
    > the ability to kill the connection after more than two or three recipient
    > names have generated errors.
    
    This is a good idea where a predetermined number of errors in RCPT
    should warrant the sendmail process to abort and terminate. But on
    the other side, it'll interrupt normal mail messages delivery, hence,
    causing lots of retries. Default of 3-5 days.
    
    I'd suggest to add some intended delays, for instance:
    when there's a RCPT error, the attacked sendmail daemon will
    delay say 30 seconds, before it accepts another RCPT TO or other command.
    Of course eventually the sendmail will time out and drop the
    connections when necessary.
    
    --Joseph
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:38:32 PDT