double-bounce DOS attack ?? please help

General eFa discussion
Post Reply
c0mputerking
Posts: 29
Joined: 26 Aug 2014 23:47

double-bounce DOS attack ?? please help

Post by c0mputerking »

My logs are filling with these and my system is basically DOS as it is to busy deffering 10's of thousands of these to do anything else

398D0C0E01 2243 Tue Mar 6 12:35:02 double-bounce@myfakedomain.com
(delivery temporarily suspended: connect to mx2.myfakedomain.com[1.2.3.4]:25: Connection timed out)
postmaster@myfakedomian.com

8215 Tue Mar 6 12:35:01 MAILER-DAEMON
(connect to mx2.myfakedomain.com[1.2.3.4]:25: Connection timed out)
double-bounce@myfakedomain.com

NOTE i am on the latest version of EFA

MailWatch for MailScanner v1.2.7-dev running on EFA-3.0.2.6 - © 2006-2018
User avatar
shawniverson
Posts: 3644
Joined: 13 Jan 2014 23:30
Location: Indianapolis, Indiana USA
Contact:

Re: double-bounce DOS attack ?? please help

Post by shawniverson »

Turn off double-bounce notifications until you get this resolved. You are stacking double-bounces from failed double-bounces!

Look in /etc/postfix/main.cf near the end for "2bounce_notice_recipient"
Post Reply