[Mimedefang] DoS??

Jan Pieter Cornet johnpc at xs4all.nl
Fri Oct 14 16:43:22 EDT 2005


On Fri, Oct 14, 2005 at 03:45:47PM -0400, WBrown at e1b.org wrote:
> Is anyone else seeing extremely high traffic levels today?  I've got two 

Nope, it's an ordinary friday here... quite unremarkable traffic peaking
around 60 emails/sec, less than 1 virus/sec, and around 35 spams/sec
detected (but not every email is scanned for spam).

You probably got a mailloop somewhere? Put an hour's worth of sendmail
logs through a filter that extracts all from=... and to=.... addresses,
and "sort | uniq -c | sort -n" those and you'll find the culprit (if you
can't find it by visual inspection, that is).

-- 
#!perl -wpl # mmfppfmpmmpp mmpffm <pmmppfmfpppppfmmmf at fpffmm4mmmpmfpmf.ppppmf>
$p=3-2*/[^\W\dmpf_]/i;s.[a-z]{$p}.vec($f=join('',$p-1?chr(sub{$_[0]*9+$_[1]*3+
$_[2]}->(map{/p|f/i+/f/i}split//,$&)+97):qw(m p f)[map{((ord$&)%32-1)/$_%3}(9,
3,1)]),5,1)='`'lt$&;$f.eig;                                # Jan-Pieter Cornet



More information about the MIMEDefang mailing list