NEWS AND NOTES FROM ROOTSWEB SPAM ATTACK. On 10/26/98, Dr. Brian Leverich wrote: Tim Pierce and a Spammer and I Attack the Web Server. Just a bit ago I checked out the main Web server and found it operating at load factor 26, which is way high for peak hours and extremely weird for this time of the evening. Turns out that Tim Pierce and a spammer and I were cooperating to attack the server. Here's what happened. The spammer flashflooded our 4,000 mailing lists with massively cross-posted garbage. Because it was massively cross-posted and because Tim's filters prevented it from going out to the lists, the posts all made it onto the listservers without the load climbing on the listservers enough to slow the flow. Because Tim CCs all the "Spam Detective" catches to himself on the Web server (that's where he reads his mail), the listservers cheerfully tried to force 4,000 pieces of spam onto the Web server simultaneously with 4,000 SMTP connections. Ordinarily this wouldn't be a problem, because the sendmail on the Web server would have started choking off incoming as the load factor skyrocketed. But I had the load choke-off set *very* high because, before I upgraded the server in June, I'd had to do that so rootsweb-help would keep working. So the Web server just sat there and got pounded. I've rationalized the sendmail settings now so the Spam Detective can no longer dangerously mailbomb the Web server. RootsWeb continues to improve our facilities for surviving spam attacks and preventing spam from reaching our mailing lists. On Monday of this week, RootsWeb brought a new mailhub server online. The new mailhub server, which is one of RootsWeb's fastest and most expensive servers to date, has the speed and capacity to support the more sophisticated spam filters that we will be implementing in the future. -- $ Barbara Farthing Bonham Summerville, SC The Family Snitch's Web http://www.tfsweb.net League of the South - SC Chapter http://www.palmetto.org