Great Circle Associates Majordomo-Users
(November 1999)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: NEW-NEW Majordomo Attack...
From: "David L. Potter" <potter @ chebucto . ns . ca>
Date: Wed, 24 Nov 1999 10:51:41 -0400 (AST)
To: Majordomo-users @ GreatCircle . COM, "Roger B.A. Klorese" <rogerk @ QueerNet . ORG>
In-reply-to: <Pine.SOL.3.90.991124072431.3360F-100000@halifax.chebucto.ns.ca>


The attack has shifted to massive info requests...!

dlp

On Wed, 24 Nov 1999, David L. Potter wrote:

> 
> Hi Perry... 
> 
> It's only filtering mail sent to 'majordomo' not mail sent to the list 
> addresses so the overhead is actiually very low.
> 
> Unless you're operating several hundred lists I wouldn't worry about it 
> needing it at this stage....
> 
> My filter is pretty crude and needs to be set up at the system 
> administration level, access to cron jobs on a unix system... 
> 
> I don't mind sharing but I'm not interested in 'publishing' it until 
> it's a little tighter...
> 
> It does need work... cleanup and documentation and there's at least one 
> hole still in it that needs to be repaired out... unfortunately I'm not 
> likely get to it today... 
> 
> david potter
> 
> 
> On Tue, 23 Nov 1999, Perry wrote:
> 
> > At 08:59 PM 11/23/99 , you wrote:
> > >We now filter the major's front end, looking for:
> > >
> > >1) rapid subscribe requests from a single address, or
> > >2) bulk subscribes in one message
> > >
> > >It's in shell and messy but it might serve as the basis for a real
> > >solution...
> > 
> > David, that pretty much sucks.  Hoping that the list I setup a few weeks 
> > ago doesn't ever have that.  Would you be willing to post your setup, or 
> > provide pointers on setting it up?
> > 
> > We run the list off of a cable modem w/ Static IP and a dyndns.org 
> > hostname.  Something even 1/4 that size would probably kill our bandwidth.
> > ---
> > Perry Wolf 				
> > perryw@bellsouth.net  /  http://www.webmasterp.com	
> > 
> 
> 



Follow-Ups:
References:
Indexed By Date Previous: Re: Easy Question
From: Kevin Merrill <kmerrill@listserv.nses.com>
Next: Re: Majordomo Attack...
From: Kevin Merrill <kmerrill@listserv.nses.com>
Indexed By Thread Previous: Re: Majordomo Attack...
From: "David L. Potter" <potter@chebucto.ns.ca>
Next: Re: NEW-NEW Majordomo Attack...
From: Jeffrey Goldberg <J.Goldberg@Cranfield.ac.uk>

Google
 
Search Internet Search www.greatcircle.com