Re[2]: Sendmail DOS

[Jean-Francois JOLY <jfjoly@free.fr>]

Hello Berend,

  You're right, it's a good question but:
  It *is* Sendmail ;-)
  I will try the features you told me, what do you think of this
  setting, there is 150 PCs behind a 128k leased line.
  O RefuseLA=15
  O MaxDaemonChildren=30
  O ConnectionRateThrottle=2

  I wonder if "ConnectionRateThrottle" will just make the client wait
  or if he will refuse the connection (would be crazy !).

Thanks. JF.
  
Thursday, February 22, 2001, 12:42:40 PM, you wrote:


BDS> On Thu, 22 Feb 2001 13:27:07 Antti Tolamo wrote:
BDS> | At 13:16 22.2.2001, Berend De Schouwer wrote:
BDS> | 
BDS> | 
| >>event a DoS, from
| >>their description, if they are implemented correctly.  At least,
| >>they'll offer as much protection as inetd can.  I've used them
| >>before when a mail script when crazy and caused too many
| >>connections.
| >>
| >>Anyway, Debian Potato ships with Exim, not sendmail.
| >>
BDS> | 
BDS> | So?

BDS> So does Nessus talk to sendmail or Exim?  I've had security scanners
BDS> scan my OpenBSD ftp server and list wu-ftpd vulnerabilities.
BDS> Just checking :)

BDS> | Antti
BDS> | 
BDS> | 
BDS> | --  
BDS> | To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
BDS> | with a subject of "unsubscribe". Trouble? Contact
BDS> | listmaster@lists.debian.org
BDS> | 
BDS> Kind regards,                             
BDS> Berend                                  




-- 
Best regards,
 Jean-Francois                            mailto:jfjoly@free.fr