On Wed, 29 Nov 2006, Matt wrote:
> So I've searched around but haven't found any real solutions (in fact,
> there may not be any solutions). For the past week one of my virtual
> domains has been slammed by what appears to be a distributed spam
> attack. I have the validrcptto patch
> (http://qmail.jms1.net/patches/combined-6c5.shtml)
> installed - so at least I don't have 80,000 messages trying to bounce.
> At first it was a big deal because it assisted in maxing out my remote
> concurrency, but that has subsided quite a bit now - so now it's just
> annoying me. Is there any real solutions to deal with this? I could
> add the ip addresses to my iptables . . . but boy would that be a lot of
> ip's.
If you had some greylisting system you could filter out all the zombie PCs
pretty easily...
--
Aj.
|