full-disclosure - Block notification / bounce mails (as in DDOS)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <E075A187B11EED409B12D00100CAAD662DA4@ntserver.meltemi.local>
From: Jos at meltemi.co.uk (Jos Osborne)
Subject: Block notification / bounce mails (as in DDOS)

Had a similar situation here - didn't know there was a problem till the exchange server crashed because the dear user didn't think to tell me she had about 3500+ spam mails in her deleted items...

Fortunately, all the e-mails came from the same person, so I was able to tell Exchange Server to simply not accept any e-mails from that address.
Don't know about if they were all coming from different places though. It might be possible to filter out all mails with "Undeliverable Mail" in the header, but the overheads might be crippling.

Jos