Date: Mon, 25 Sep 2000 11:18:16 -0400 From: "Troy Settle" <troy@psknet.com> To: "Len Conrad" <lconrad@Go2France.com>, <freebsd-questions@freebsd.org> Subject: RE: question Message-ID: <BFEGKDHLHDNOJEIHJDBAMECFCAAA.troy@psknet.com> In-Reply-To: <5.0.0.25.0.20000925165301.08232d40@mail.Go2France.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Slow down Len. Your postfix stuff is a great addon for Imail (hell, with Cyrus or vpopmail on the back end, and a decent web client, it'd be a great replacement). But, in this case, the problem is with a web server. A 401 is a bad request for HTTP protocol. -- Troy Settle Pulaski Networks 540.994.4254 It's always a long day, 86400 doesn't fit into a short > -----Original Message----- > From: owner-freebsd-questions@FreeBSD.ORG > [mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of Len Conrad > Sent: Monday, September 25, 2000 10:58 AM > To: freebsd-questions@freebsd.org > Subject: Re: question > > > > >I have searched extensively for info on this subject and > >have found nothing. I admin a server > > server of what? > > >which gets allot of bad requests > > request for what? > > >I asked a real Unix guru about the problem and he recommended > >using tar pitting. The idea is that every time a bad request > >is generated by an I.P. the time the server takes to respond is > >increased. > >Example: > >Bad request #1. server answers with 401 error in 1 second > >Bad request #1. server answers with 401 error in 2 seconds > >Bad request #1. server answers with 401 error in 4 seconds > > > >This sounds like the perfect answer to many problems with > >a variety of server attacks. The problem is I can only find > >info on the subject relating to spam mail and sendmail. > > www.postfix.org, configuration, UCE, tarpitting is supported, and you > might also look at other UCE defenses, plus perhaps set up a > relay-onlyh mail hub to front-end short-circuit this crap before it > gets to your mailbox server. > > IMGate in my sig is a FreeBSD/postfix gateway playing just this for > Imail, but the approach is not tied any brand of mail server. > > Len > > > http://BIND8NT.MEIway.com: ISC BIND 8.2.2 p5 installable binary for NT4 > http://IMGate.MEIway.com: Build free, hi-perf, anti-spam mail gateways > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?BFEGKDHLHDNOJEIHJDBAMECFCAAA.troy>