[OT] HELP!!! mail attack

John Summerfield debian at herakles.homelinux.org
Wed Mar 26 22:56:53 UTC 2008


Rodolfo Alcazar Portillo wrote:
> Am Donnerstag, den 27.03.2008, 00:17 +0900 schrieb John Summerfield:
>> Rodolfo Alcazar Portillo wrote:
>>> Ok, the problem is that the content is really random... I tried to found
>>> common words:
>>> http://www.padep.org.bo/log20080325/log/words4-sort_-_n
>>> thanks, anyway...
>> The recipient address I thought was common. Does it not appear in the 
>> headers?
> 
> Of course. I've already deleted the account yesterday, anyway, which
> causes a similar effect in terms of bandwidth, but the attempts are so
That occurred to me after I sent.

> many, that some moments takes 20% of my current bandwidth... My concern
> are:

Back to munging the lots and figuring out the attacking IP addresses, 
etc as I outlined already.


> a) we could suffer a new attack with other account. 
> b) i need to restore that account.
Give the user a new account. When things quieten down, use a alias to 
catch email for the old address.

> 
> Thanks!


-- 

Cheers
John

-- spambait
1aaaaaaa at coco.merseine.nu  Z1aaaaaaa at coco.merseine.nu
-- Advice
http://webfoot.com/advice/email.top.php
http://www.catb.org/~esr/faqs/smart-questions.html
http://support.microsoft.com/kb/555375

You cannot reply off-list:-)




More information about the fedora-list mailing list