[Date Prev][Date Next] [Thread Prev][Thread Next]
[Thread Index]
[Date Index]
[Author Index]
rumplestiltskin email attacks...
- From: Bill Dossett <billd emtex com>
- To: redhat-list redhat com
- Subject: rumplestiltskin email attacks...
- Date: Thu May 1 12:24:09 2003
Hi,
I've been getting rumplestiltskin attack
for ages now and kinda sick of it... specially
when I'm having other mail server problems,
not really too keen on this. Just wondered
if anyone and found an effective way of stopping
it... using redhat8 and sendmail and procmail...
rumplestiltkin attack basically tries to mail
to everyone they can think of at your domain.com...
and they either get a user unknown or if they don't
the address is valid and gets sold onto lists.
I found a perl script that attempts to stop it
by putting a host route from the sending host to
an ip address with no machine on it... and this
works, but the attackers seem to have moved on
and by the end of the day yesterday, I had colleted
over 800 ip addresses that they were doing it from...
sheesh, there must be more compromised computers
out there than anyone really knows... or open relays...
but anyway, does anyone know of any sendmail, or procmail
magic that I could use to stop this? It has to be
_the_ most annoying use of bandwidth that I can think
of.
Cheers
Bill
[Date Prev][Date Next] [Thread Prev][Thread Next]
[Thread Index]
[Date Index]
[Author Index]