From: Robin Lynn Frank (rlfrankparadigm-omega.com)
Date: Tue Nov 02 2004 - 11:18:53 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Tue, 2004-11-02 at 08:52, Neezam Haniff wrote:
> On Tue, 2 Nov 2004, Robin Lynn Frank wrote:
>
> > Is there anything I can do to get postfix to tie up their server? Is
>
> You could try increasing the error limits, but this may come with
> limited success.
>
Agreed. Insufficient success to outweigh the negative effects.

> > alternative to put another box between postfix and the internet with
> > iptables configured to TARPIT all connections from their IPs?
>
> If their provider is not willing to deal with the situation
> accordingly, then this may be the only avenue for you. Your uplink
> provider may be able to null route them; which may be nice especially if
> you are paying for all the bits that go across your WAN link(s).
>
I need to clarify. These folks are doing this in the name of
discovering open relays, insecure web proxies and sundry other evils.
It is unlikely I will get any of our providers to act because of that.

From my point of view, it is like the police breaking into my home three
times a week to be sure I have no weapons of mass destruction.
--
Robin Lynn Frank
Director of Operations
Paradigm-Omega, LLC
http://www.paradigm-omega.com/
====================================================================
Spambots are welcome at http://paradigm-omega.net/cgi-bin/custmail.cgi
====================================================================
By the time I get it to work,
the next version is released.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: Sed quis custodiet ipsos custodes?

iD8DBQBBh8F7o0pgX8xyW4YRAu19AJ9q0Z2ZUF/4Hk1PRKNsQ8SeyuzCWQCeI2HY
3ByQvhyrFWG92BPMVPQqF+s=
=8jra
-----END PGP SIGNATURE-----

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]