"Dan Mahoney, System Admin" wrote:
> Three firewall rules I think nobody should live without:
> 
> 1) ipfw add 500 allow tcp from any to me 25 limit src-addr 2 setup
> 
> Yup, you read that right.  Limits tcp connections to no more than two
> per connecting address.  You could probably even drop that to one.

A nice thought, but absolutely useless in the case where you receive any
volume of mail from a host running qmail.  :(

qmail, in case you don't know already, does not serialize mail delivery
by reusing a single connection (like just about every other MTA in
existence).  One message == one recipient == one connection.  >:(

-kgd
-- 
Get your mouse off of there!  You don't know where that email has been!

Reply via email to