Great Circle Associates Firewalls
(April 1997)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Email bombs
From: Robert Olsson <robban @ robtex . com>
Date: Wed, 23 Apr 1997 17:25:25 +0200
To: "'Firewalls'" <firewalls @ GreatCircle . COM>
In-reply-to: <199704230549 . BAA08366 @ grand-am . wpa . poss . com>
References: <Message <01BC4F79 . A450D810 @ ppp-2 . svq . servicom . es>

At 01:49 970423 -0400, Ken Wilcox wrote:
>Alvaro Redondo <merlin @
 sevillaonline .
 com> writes:
>> If the messages the mail-bomber sent were big, you would only have to
telnet 
>> to the mail server and erase the messages there, without having to
download t
>> hem. That's the reason any good mail-bomber sends thousands of small
messages
>> , instead of a few big ones.
>> 
>> Alvaro Redondo.
>> 
>
>Don't assume too much. A lot of systems implement mail via POP and IMAP, and
>may not allow users to telnet, or whatever, in to the system. Also, the
>fact that these large messages fill up spool space is the problem, not so
>much downloading them. Yea, downloading them is a hassle, but not nearly
>as much as denying you, and other users of the system, the receipt of mail.
>
>
>-- 
>Ken Wilcox					Perfect Order Inc.
>Account Representative				Authorized Sun Reseller
>2212 Eagles Nest Lane
>Monroeville PA 15146
>Phone: +1 412 373 1528				Email: wilcox @
 poss .
 com
>Fax:   +1 412 373 1722
>
>

Just a tip: You can always telnet to the pop3-port, "LIST" your mailbox to
see which mails look like the bomb(s) (you get the sizes with LIST) and send 
"DELE n". Maybe that's also what Alvaro was talking about... 

Regards,

Robban

RobTex http://www.robtex.com/ 
home of JavaMachine, SuperSearch,   
VikingServer and Robban's Homepage. 
Apologies for delayed answers       




References:
Indexed By Date Previous: Re: Firewalls-Digest V6 #171
From: "Michael S Hines" <mshines @ purdue . edu>
Next: RE: [Firewall] Virus Protection at the Firewall
From: "Roberto Rodríguez Fernández" <super @ doc1 . ces-galicia . es>
Indexed By Thread Previous: Re: Email bombs
From: Ken Wilcox <wilcox @ poss . com>
Next: RE: Email bombs
From: Ryan Russell/SYBASE <Ryan . Russell @ sybase . com>

Google
 
Search Internet Search www.greatcircle.com