Re: [PATCH] denial of service (fwd)

[mjr () RANNEY COM (Matt Ranney)]

Here is a solution to the qmail denial of service attacks posted
recently.  This is a recent message to the qmail list.
--
Matt Ranney - mjr () ranney com
         From now on, everything we do shall be funky.

---------- Forwarded message ----------
Date: 12 Jun 1997 15:15:59 +0200
From: "Frank D. Cringle" <fdc () cliwe ping de>
To: djb-qmail () koobera math uic edu
Subject: Re: [PATCH] denial of service

[...]
If you are using tcpserver it should be sufficient to set the ulimit
once in the startup script.  All instances of qmail-smtpd inherit the
limit without further overhead.  Seems to be working fine here.

   echo "Starting tcpserver for qmail-smtpd..."
   ulimit -d 2048
   /usr/local/bin/tcpserver -v -u 61 -g 61 0 smtp /usr/local/bin/tcpcontrol \
       /etc/tcp.smtp.cdb /var/qmail/bin/qmail-smtpd 2>&1 | \
       /var/qmail/bin/splogger smtpd 3 &
--
Frank Cringle,      fdc () cliwe ping de
voice: (+49 2304) 467101; fax: 943357