full-disclosure - Block notification / bounce mails (as in DDOS)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20040401150501.DDE707F35@mail-terminator.cudeso.be>
From: koen4security at hotmail.com (Koen)
Subject: Block notification / bounce mails (as in DDOS)

Luke Norman wrote:
>>
>> What do you all suggest to this 'seemingly' DDOS-attack (allthough not 
>> intended as a DOS)?
>>
> Set up a server-side bayesian filter to block all e-mails containing 
> certain words (such as 'address not found' or similar). I'd be very 
> suprised if there isn't a filter like this already available if you 
> google it. Have a look at the 'fighting useless notification mails' 
> thread from a few days ago, which is a related topic

This would be an option if the mailserver is still capable of handling all or 
some of the mail. As the question was raised, this is not the case. The 
'theoratical' situation is that my mailserver is as dead as a doornail (not 
really crashed but out of oxygen..network-bandwidth).

Thanks anyway for the response (and yes, the thread on fighting.... is indeed 
very helpful for the case where I have some 'spare' bandwidth)

Koen