From: Lefteris Tsintjelis (no email)
Date: Fri Jul 01 2005 - 11:03:35 EDT
Victor Duchovni wrote:
>
> Note, the DoS protection in anvil(8) is designed to prevent accidental
> DoS from a single source (a run-away client). It is not intended for
> traffic shaping, the limits should be generous enough to allow all
> legitimate traffic to pass unimpeded. It is extremely difficult to
> prevent a DDoS attack, Postfix will not lock up your system, but
> little to no useful mail will get through.
Recently we have been hit by DoS and DDoS attacks a few times and
postfix did a perfect job on holding up. I am affraid though that
within the next couple of years these attacks will turn more and
more into DDoS the way things are going, as predicted by many and
assuming not any counter mesures are taken. Are there any other
hints or other parameters besides the build in ones that can help
the performance (memory usage/CPU utilization) of the exposed
gateways?
Lefteris
|
|
|