Koozali.org: home of the SME Server

Backscatter causing server slowdown?

guest14620

Re: Unauthorised SMTP Relaying Spam?
« Reply #15 on: June 15, 2008, 08:51:48 AM »
I appreciate all of your input on this.  It seems to have stopped, and I don't think it's got to do with anything that I've done.  I guess the botnet that was spoofing one of our email addresses has decided to move on (probably since the address has been added to most decent spam filters grrrr).  All the messages we were receiving were bounce backs, and I couldn't seem to get any decent header info from the original email in the bounce-back, which is a real pain in the ass.  So this issue doesn't really have anything to do with SME server at all, although I guess many mail server admins will experience similar issues throughout their administration roles.

Offline zatnikatel

  • *****
  • 190
  • +0/-0
Re: Unauthorised SMTP Relaying Spam?
« Reply #16 on: June 15, 2008, 01:40:46 PM »
should have used tcpdump on port 25 to see were it was comming from

Offline mmccarn

  • *
  • 2,653
  • +10/-0
Re: Unauthorised SMTP Relaying Spam?
« Reply #17 on: June 15, 2008, 04:46:56 PM »
Here's a wikipedia article on backscatter spam that may explain what you saw: http://en.wikipedia.org/wiki/Backscatter_%28e-mail%29

One of my clients experienced a huge surge in backscatter of this sort a couple weeks ago, then it calmed down.

SME, by the way, does not send backscatter spam messages.  Email to unrecognized addresses is either rejected during the smtp conversation or delivered to a specified local mailbox for processing.


Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: Unauthorised SMTP Relaying Spam?
« Reply #18 on: June 16, 2008, 04:54:25 AM »
So this issue doesn't really have anything to do with SME server at all, ...

Please edit the subject of this thread. Thanks.

Offline purvis

  • *****
  • 567
  • +0/-0
Re: Backscatter causing server slowdown?
« Reply #19 on: June 16, 2008, 06:29:35 AM »
removed offending message by myself
« Last Edit: June 17, 2008, 06:48:10 AM by purvis »

Offline zatnikatel

  • *****
  • 190
  • +0/-0
Re: Backscatter causing server slowdown?
« Reply #20 on: June 16, 2008, 08:46:09 AM »
no knocking you or charlie but i don't think it was to nice saying that CharlieBrady was an ass every one on this site needs to play nice
i really can not see what he said is being an ass as he is a DEV on sme he does know what he is talking about

Offline cactus

  • *
  • 4,880
  • +3/-0
    • http://www.snetram.nl
Re: Backscatter causing server slowdown?
« Reply #21 on: June 16, 2008, 08:20:50 PM »
Charlie, are you a ass today or is that the way you always are.
I seriously suggest you watch you tone, you are talking to one of the core devs, who has excellent knowledge on SME Server and a lot off problems related to it.

Next time you decide to insult people again (in the forums, or anyone else) please consider how you would like it to be name-called. People in this forums most of the times are pretty willingly to help others and rarely, if not ever, have a need to revert to name calling. It also defeats the purpose of getting the help you desire...

I think Charlie is right in his replies to you, certainly as you have formulated you question and opinions on your problem way to strong (and made the wrong assumptoion), like Charlie said the frequency of the DNS lookups in your case are no-way near a denial-of-service attempt, stating so in the topic of your posts will raise panic and is bad publicity for this excellent product. Criticism is not bad, bud it should be based on evidence and proper facts, your assumption was seriously exaggerated and Charlie being concerned with his work asked you to make your topic title reflect the situation properly to not raise unneeded and unwanted havoc.

Behavior like this should result in some sort of disciplinary measures IMHO.
Be careful whose advice you buy, but be patient with those who supply it. Advice is a form of nostalgia, dispensing it is a way of fishing the past from the disposal, wiping it off, painting over the ugly parts and recycling it for more than its worth ~ Baz Luhrmann - Everybody's Free (To Wear Sunscreen)

Offline cactus

  • *
  • 4,880
  • +3/-0
    • http://www.snetram.nl
Re: Backscatter causing server slowdown?
« Reply #22 on: June 16, 2008, 08:22:36 PM »
You'll probably help more people, or at least confuse fewer people, if you just post what you know, and not what you guess.
Who is left guessing and who is guessing wrong here? Please reread the topic from you rinitial post up to and including the explanation of what is a denial-of-service attack.
Be careful whose advice you buy, but be patient with those who supply it. Advice is a form of nostalgia, dispensing it is a way of fishing the past from the disposal, wiping it off, painting over the ugly parts and recycling it for more than its worth ~ Baz Luhrmann - Everybody's Free (To Wear Sunscreen)

Offline purvis

  • *****
  • 567
  • +0/-0
Re: Backscatter causing server slowdown?
« Reply #23 on: June 16, 2008, 08:42:01 PM »
i felt insulted and decided to question ones attitude.
the remark was only in reference from this thread.
i have spent over 40 hours working to resolve the other issues i had that had nothing to do with this thread and have done as he suggested.
i purchased a in depth book on networking.
because somebody works hard and or is knowledgeable, does not entitle them to be rude, which i felt he was and i responded in kind.
 

Offline zatnikatel

  • *****
  • 190
  • +0/-0
Re: Backscatter causing server slowdown?
« Reply #24 on: June 16, 2008, 08:43:35 PM »
I seriously suggest you watch you tone, you are talking to one of the core devs, who has excellent knowledge on SME Server and a lot off problems related to it.


Behavior like this should result in some sort of disciplinary measures IMHO.

thanks for backing me up there is no reason for being rude in these forums no reason what so ever the dev's spend a lot of there own time on SME away from family and friends and they do an a really good job you will never see i bad word come out on my mouth about anyone on this site SME rocks no to ways about it

there are nicer way of saying things rather than calling some one an ass if you think they are rude you can go about it other ways than being rude yourself
« Last Edit: June 16, 2008, 08:48:25 PM by zatnktel »

Offline cactus

  • *
  • 4,880
  • +3/-0
    • http://www.snetram.nl
Re: Backscatter causing server slowdown?
« Reply #25 on: June 16, 2008, 08:45:56 PM »
i felt insulted and decided to question ones attitude.
the remark was only in reference from this thread.
i have spent over 40 hours working to resolve the other issues i had that had nothing to do with this thread and have done as he suggested.
i purchased a in depth book on networking.
because somebody works hard and or is knowledgeable, does not entitle them to be rude, which i felt he was and i responded in kind.
 
If your goal is to get information, pointers and want to be helped in order to solve your problem I think you should drop the eye for an eye, tooth for a tooth policy and do not let frustration get in the way. Perhaps an apology to Charlie would be in place.

If you feel insulted say so, open it for discussion and if th eintent was to insult you give the poster an opportunity to apologize or clear up the misunderstanding.
Be careful whose advice you buy, but be patient with those who supply it. Advice is a form of nostalgia, dispensing it is a way of fishing the past from the disposal, wiping it off, painting over the ugly parts and recycling it for more than its worth ~ Baz Luhrmann - Everybody's Free (To Wear Sunscreen)

Offline zatnikatel

  • *****
  • 190
  • +0/-0
Re: Backscatter causing server slowdown?
« Reply #26 on: June 16, 2008, 08:53:00 PM »
i agree saying sorry to Charlie would be a good way to start

Offline purvis

  • *****
  • 567
  • +0/-0
Re: Backscatter causing server slowdown?
« Reply #27 on: June 16, 2008, 09:22:17 PM »
Charlie
I apologize to you for the use of the strong words i sent toward you.
i do not like the way you talked to me, specially when i was trying to give some kind of guidance to the poster.
i felt insulted the way you quoted me and made a remark to me that was uncalled for and in a single particular post.
i have seen many post here on this forum where people just speak their mind in harness, and that is what kind of a message i took it as and  i figured i would fire back.
paul





 

Offline mercyh

  • *
  • 824
  • +0/-0
    • http://mercyh.org
Re: Backscatter causing server slowdown?
« Reply #28 on: June 16, 2008, 10:09:52 PM »
Paul,

Thanks for taking the high road on this. I also appreciate the concern from everyone for keeping the forums clean. I know that Charlie often comes across as quite terse in his replies.

Whenever I see a person that writes code do this I try to think how I would say what they have to say in code and conclude that they may not mean it in the way that I may be taking it.

There are also people that do not suffer fools gladly. And I will be the first to say that I have given foolish and incorrect advice at times.