From: Sandy Drobic (no email)
Date: Sat Oct 01 2005 - 18:17:57 EDT
Len Conrad wrote:
> afaics, when postfix smtp SAV calls those IPs, the smtp session is held
> by the other end indefinitely, some kind of heart-beat that keeps
> postfix smtp from timing out.
Can you find out what commands are used to keep the connection from timing
out?
> We have blocked these Class Cs at our gateway, but is there any param in
> postfix that could reduce postfix's vulnerability to tarpitting?
Perhaps smtpd_junk_command_limit, smtpd_noop_commands?
The docs says Postfix accepts by default 100 of these commands before it
increases the smtpd error count.
Sandy
|
|
|