Email server

From: Tim Longo (tlongo@research.avayalabs.com)
Date: Tue Oct 26 2004 - 10:43:49 EDT


I have been running a 220R (2cpu, 2GB RAM), as a mail server for about
80 people. Seems more than adequate under normal conditions.

Recently, I've had a couple of situations where someone running an
misconfigured notification tool flooded the mail server which bacame a
DOS attack. The problem has been resolved, but it made me realize how
vulnerable the mail server is to this type of attack.

I'm wondering if anyone can cite some experience or give some
suggestions to reduce this type of vulnerability? Since I am running
sendmail, I have set a queue and reject load average, but I'd like to
do more. I don't think the number of people I service requires more
hardware, but that may be necessary too.

Thank you for any input.
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers



This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:29:37 EDT