[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
DDOS solution recommendation
- Subject: DDOS solution recommendation
- From: colinj at mx5.org.uk (Colin Johnston)
- Date: Mon, 12 Jan 2015 08:48:28 +0000
- In-reply-to: <[email protected]>
- References: <[email protected]> <22194530.1736.1420983994911.JavaMail.mhammett@ThunderFuck> <[email protected]>
> On 12 Jan 2015, at 08:29, David Hofstee <david at mailplus.nl> wrote:
>
> Hi Mike,
>
> About trying to hit the mail ports... It is very easy for a domain to set its MX to a random host name. So before you block you might want to check the To-domain in the header of the mail. Otherwise it is too easy to DoS yourself (by planting email addresses in systems, such as mine, and then changing the MX of that domain to your hosts).
>
Should be overcome by good dont block range checker and header checks as above
Colin