Results 1 to 9 of 9
  1. #1
    Untangle Ninja juank's Avatar
    Join Date
    Aug 2007
    Location
    Athens
    Posts
    1,413

    Default $#@$@#% We're getting hammered by backscatterer !

    $#@$@#% We're getting hammered by backscatterer !

    Anybody out there with the same problem?
    --------------------------------
    Juan Machado
    --------------------------------

  2. #2
    Master Untangler
    Join Date
    Apr 2008
    Posts
    106

    Default

    I haven't noticed it here at the office yet, but I was working with the data center earlier today because our web server was getting hit.

  3. #3
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    26,546

    Default

    Everything seems quiet on my front... But I only have 1 public mail server in circulation.
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

  4. #4
    Untangle Junkie dmorris's Avatar
    Join Date
    Nov 2006
    Location
    San Carlos, CA
    Posts
    17,486

    Default

    quiet here too.

    I may be someone spamming from your address.
    happens to us from time to time.
    Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  5. #5
    Master Untangler ntldr's Avatar
    Join Date
    Jan 2008
    Posts
    147

    Default

    This happens about once a month to different clients of mine. Not much to do except write a few Outlook rules to delete the stuff. The worst case I noticed was 200+/day.

  6. #6
    Untangler nospoon's Avatar
    Join Date
    Oct 2008
    Location
    Adelaide, Australia
    Posts
    42

    Default

    Just a thought - how about writing a bypass rule for that source IP and sending it to a non-existant internal IP?

  7. #7
    Untangler nospoon's Avatar
    Join Date
    Oct 2008
    Location
    Adelaide, Australia
    Posts
    42

    Default

    Quote Originally Posted by nospoon View Post
    Just a thought - how about writing a bypass rule for that source IP and sending it to a non-existant internal IP?
    Ignore that - now I've Googled backscatterer -- I understand the issue.

    We down here call idiots like me a "galah" - a very stupid Australian bird.

    We've seen this numerous times (just wasn't aware it was called "backscatter"). Anyway, we've written an email server rule that just dumps them into the bad email que... there's usually something unique and identifiable in the headers you can chew on. MDaemon lets us do this - but you might need to shell a process in other MTA products (good luck with Exchange).
    Last edited by nospoon; 11-13-2008 at 10:28 PM.

  8. #8
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    26,546

    Default

    Exchange 2007 with the Anti-Spam features enabled just deals with it. I haven't had to adjust it... *yet*

    And, don't call yourself an idiot. You removed yourself from that label the instant you decided to hit google and educate yourself.
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

  9. #9
    Untangler nospoon's Avatar
    Join Date
    Oct 2008
    Location
    Adelaide, Australia
    Posts
    42

    Default

    You're too kind. You're on my Christmas list

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2