Page 1 of 1

double-bounce DOS attack ?? please help

Posted: 06 Mar 2018 20:29
by c0mputerking
My logs are filling with these and my system is basically DOS as it is to busy deffering 10's of thousands of these to do anything else

398D0C0E01 2243 Tue Mar 6 12:35:02 double-bounce@myfakedomain.com
(delivery temporarily suspended: connect to mx2.myfakedomain.com[1.2.3.4]:25: Connection timed out)
postmaster@myfakedomian.com

8215 Tue Mar 6 12:35:01 MAILER-DAEMON
(connect to mx2.myfakedomain.com[1.2.3.4]:25: Connection timed out)
double-bounce@myfakedomain.com

NOTE i am on the latest version of EFA

MailWatch for MailScanner v1.2.7-dev running on EFA-3.0.2.6 - © 2006-2018

Re: double-bounce DOS attack ?? please help

Posted: 10 Mar 2018 13:54
by shawniverson
Turn off double-bounce notifications until you get this resolved. You are stacking double-bounces from failed double-bounces!

Look in /etc/postfix/main.cf near the end for "2bounce_notice_recipient"