Sendmail Allowable Connections?

[kharford]

Hi,
With the advent of the SoBig virus I am getting hammered by port 25 connections. What is an allowable limit for connections with a corporate environment. In light of the SoBig virus?

Thanks

 

[jad]

i'm not sure if it is linked, but there is an option of 'MaxDaemonChildren' and i think the default is 12.

there is also the 'ConnectionRateThrottle' option you could look at.

 

[Rhinokiller]

Increasing/decreasing the number of allowable connections is not a good approach, you will just compound the problem. I just got finished dealing with a clients Welchia/Lovsan worm problem and found that shaping traffic before it got to the DMZ was far more effective (using routers and firewalls) than allowing more silmutaneous connections to port 25.
In my case it was dealing with ICMP & the now infamous port 135 RPC exploit.

There is no God, only 10001010