Date: Thu, 29 Jun 2000 15:26:31 -0400 From: lambert@cswnet.com To: freebsd-isp@freebsd.org Subject: Un-authorized ETRNs Message-ID: <200006292032.PAA32069@troi.csw.net>
next in thread | raw e-mail | index | archive | help
I couldn't decide if this belonged on -ISP or -SECURITY. Please tell me if my guess was incorrect. I have seen a lot of ETRN requests from unauthorized domains lately. Is this some form of attack to try to slow my mail servers down? Over the last 2 weeks, sendmail has been throtling several times per day. This has happenned mostly during normal business hours which are not historically busy times for us. Perhaps the summer has changed my user access patterns more than I realize or somebody is somehow DoSing me. The second option seems more realistic to me. Am I overly paranoid and just need to build a new box or should I be accelerating my efforts toward building a firewall for my server farm? -- Scott Lambert lambert@cswnet.com Systems and Security Administrator CSW Net, Inc. ================================================================ Written: Thursday, June 29, 2000 - 03:26 PM To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200006292032.PAA32069>