I have an opened SMTP server that allows me to send emails. The problem is that I can send a massive amount of emails (80,000+) to a specific mailbox and block all the other legitimate emails (that are sent to other mailboxes).
The specific mailbox is validated by size. However all the rejected emails that are sent after the size limit are stored on the same queue of the legitimates emails.
What should be done in order to solve that issue?
Answer to dr01
Right now the service is not exposed to the Internet and I wrote my own script for the Open Relay attack. Thanks for the advise!
I cant set up an SMTP auth. The service should be opened to the Internet and any user should be able to use it, unless there is a way that I'm not aware to.
The sender could be anyone, however the recipient can be only mailboxes that under my control.
In the current implementation, when an email is sent to a fulled mailbox, the email is stored on the same queue of the legitimate emails - that's the reason why I get that issue.
I was thinking on the following steps (part of you recommendations): 1. Limit the recipient mailbox size. 2. When an email is sent to a fulled mailbox, the email will be managed in a dedicated queue, which is not come across the the second queue.
This is a theoretical move. I still need to check if it's applicable.
General steps: 1. Implement an SPF mechanism. 2. Use IPS.