From owner-freebsd-security Sun Dec 15 08:48:47 1996 Return-Path: Received: (from root@localhost) by freefall.freebsd.org (8.8.4/8.8.4) id IAA14598 for security-outgoing; Sun, 15 Dec 1996 08:48:47 -0800 (PST) Received: from passer.osg.gov.bc.ca (0@passer.osg.gov.bc.ca [142.32.110.29]) by freefall.freebsd.org (8.8.4/8.8.4) with ESMTP id IAA14593 for ; Sun, 15 Dec 1996 08:48:44 -0800 (PST) Received: from localhost (15005@localhost [127.0.0.1]) by passer.osg.gov.bc.ca (8.8.4/8.6.10) with SMTP id IAA14854; Sun, 15 Dec 1996 08:48:25 -0800 (PST) From: Cy Schubert - ITSD Open Systems Group Message-Id: <199612151648.IAA14854@passer.osg.gov.bc.ca> X-Authentication-Warning: passer.osg.gov.bc.ca: 15005@localhost [127.0.0.1] didn't use HELO protocol Reply-to: cschuber@uumail.gov.bc.ca X-Mailer: MH X-Sender: cschuber To: Ahmad Lokman cc: "'security@freebsd.org'" Subject: Re: How to limit the size of the email from outside In-reply-to: Your message of "Mon, 16 Dec 96 00:02:06." <01BBEAE4.60915180@sting.alurtenaga.com.my> Date: Sun, 15 Dec 96 08:48:24 -0800 X-Mts: smtp Sender: owner-security@freebsd.org X-Loop: FreeBSD.org Precedence: bulk > Here I would like to know if anyone out there know how to prevent someone > sending a large file of email to an email server. This will prevent the > guy from jamming the server. Please give me any suggestion on this matter.. Try Maxsize in your Mlocal and Mprog statements. This is what I use on my DEC Alpha desktop at work. Mlocal, P=/bin/mail, F=lsDFMrmn, S=10, R=20/40, Maxsize=1000000, A=mail -d $u Mprog, P=/usr/local/sendmail/smrsh, F=lsDFMeu, S=10, R=20/40, D=$z:/, Maxsize=1000000, A=sh -c $u This limits incoming mail processed by by smrsh and /bin/mail to 1 million bytes. You can do the same with the Mstmp, Mesmtp, and Mrelay statements to limit the size of outgoing mail as well. Regards, Phone: (250)387-8437 Cy Schubert OV/VM: BCSC02(CSCHUBER) Open Systems Support BITNET: CSCHUBER@BCSC02.BITNET ITSD Internet: cschuber@uumail.gov.bc.ca cschuber@bcsc02.gov.bc.ca "Quit spooling around, JES do it."