OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 4th quarter (Oct-Dec) 1994: Re: Stupid crackers exploiting stupid users

Re: Stupid crackers exploiting stupid users

pluvius (pluviusdragon.achilles.net)
Tue, 25 Oct 1994 16:32:00 -0400 (EDT) 

> > I'm sending a copy to rootsfu.ca so that (a) vanepp probably gets it,
> > and (b) if vanepp's mail is being stolen somehow that I can't see
> > through VRFY and EXPN, the other roots there can deal with it.
> 
> The cracker just wants to mailbomb vanepp.  He's done it before, he'll
> do it again.  Just not from *my* site, if I have anything to say about
> it.
> 
> Does ANYBODY have any code that will limit the number of messages a
> single user can send per day??  Or any other code to detect mail
> bombs?  Sending 5 identical messages to different addresses?  (Or the
> same address, for that matter..)

 oh that's grand, you want to hack telnet so that it checks the 
destination port and after x numbers of connects to a smtp port it sais
"sorry, you can't send any more mail".
 a hell of a lot better solution is to get affected sites to install 
sendmail 8.6.9 because the brialliant crackers who are doing this are 
clearly too inept to spoof identd - i'm sure a 'helo userhost' will give 
them the willies and get them to lay off