nanog mailing list archives

Your opinion please on DOS attack ...


From: Larry Vaden <vaden () texoma net>
Date: Mon, 04 Aug 1997 19:07:50 -0500

Please excuse me if this is off topic;  if so, I would appreciate a pointer
to the correct list.

We've received a few thousand late this afternoon of email messages similar
to the below.

What do you make of this?  Is there a defense other than blocking the
alleged IP range?

Your opinion appreciated.

Larry

-----

Aug  4 18:50:06 mail sendmail[29805]: SAA29805:
<_-MetHOd-MaN-_ () mail texoma net>... User unknown
Aug  4 18:50:06 mail sendmail[29805]: SAA29805: from=<>, size=0, class=0,
pri=0, nrcpts=0, proto=SMTP, relay=upsmot02.msn.com [204.95.110.79]
Aug  4 18:50:07 mail sendmail[29786]: SAA29786:
<_-MetHOd-MaN-_ () mail texoma net>... User unknown
Aug  4 18:50:07 mail sendmail[29786]: SAA29786: from=<>, size=0, class=0,
pri=0, nrcpts=0, proto=SMTP, relay=upsmot03.msn.com [204.95.110.85]
Aug  4 18:50:09 mail sendmail[29810]: SAA29810:
<_-MetHOd-MaN-_ () mail texoma net>... User unknown
Aug  4 18:50:09 mail sendmail[29810]: SAA29810: from=<>, size=0, class=0,
pri=0, nrcpts=0, proto=SMTP, relay=upsmot02.msn.com [204.95.110.79]




Current thread: