On Tue, 16 Jan 2007 11:21:15 +0000
Roy Schestowitz <newsgroups@xxxxxxxxxxxxxxx> wrote:
> We have just disconnected a guy whose LAN had 15000 connections with
> 178GB. He is using Windows XP. Is it at all surprising that servers
> grind to a halt and sometimes collapse under heavy load? This affects
> tens of thousands of people. Anyway, I told him not to be alarmed.
> It's probably a passive action, but things used to be easier when you
> could deal with the criminal directly, not with victims.
i feel for you buddy.
you think thats bad, he's on your lan. you got it easy. sometimes it's
just a matter of using ARP and it's easy enough to see whats going on,
the zombie normally sends some broadcast packets to find host to
infect... that's normally a good point to look at.
if however, the host is OUTSIDE the network, using bandwidth that's
business critical, it can be a real pain in the ass, nothing gets in or
out of the corporation.
as an ISP, we have had issues where customers get email hosting from
us, sometimes a new email virus can effect tens of thousands of other
users because the pipe gets plugged. their one or two connections to
use can flood our servers. qmail is really great though, it can queue
things sensibly, it doesn't grind to a halt, that happens is that we
can run out of bandwidth. this is just not funny. think about these new
spams with image attachments, the user only needs to send that to us
once, then the mail server has a few hundred RCPT TO envelope headers,
it's then our problem to deliver it.
then we have the problem of the backwash... all those failures that are
heading back to the user's mail box...
then there are the times when one of our customers is in the mail from:
header... that's happened a few times... tones of backwash go back to
their account...
OUTLOOK/OUTLOOK EXPRESS IS A BAD MAILER.
--
Regards, Ed :: http://www.bsdwarez.net
proud python person
The best part of waking up is Diesel in your cup.
|
|
