> -----Original Message----- > From: [EMAIL PROTECTED] [mailto:leaf-user- > [EMAIL PROTECTED] On Behalf Of Gordon Bos > Sent: Wednesday, January 09, 2008 10:17 AM > To: Michelle Konzack > Cc: leaf-user > Subject: Re: [leaf-user] Need to block IP's from spamers... > > You might want to look at another project: ASSP > http://assp.sourceforge.net/ > > This is a spam filter that blocks at the SMTP level, essentially > catching the spammer in the act. Since it immediately drops the > connection it also prevents the spammer from sending several emails at > once. It even includes a tarpit function in case the spammer tries to > reconnect and send additional spam. How cool is that? > > Gordon I'll second that. I've used ASSP for years now and like it a lot. It is incredibly tweakable, which does make the learning curve a bit steep. As with LEAF, expect to invest time up front in exchange for minimal attention to ongoing maintenance.
I agree with Gordon that a filter that drops incoming connections in progress is what you need. ASSP does this. My server rejects over 90% of external incoming messages according to the stats. My volume of incoming connections is an order of magnitude lower (less than 4000 per day) but I'm running ASSP on an old 1Ghz Celeron (Centos 4) along with sendmail and dovedot (imap & pop). ASSP averages under 4% CPU utilization. -Bob Gregory > Michelle Konzack wrote: > > Hello, > > > > I am running a 3.5 MBit SDSL from <http://www.nerim.net/> and have a > > @home Mailserver which is currently (since 2007-12-17) hit by daily > > several 100.000 spams (2-5 times 30-120 minutes) from over 2000 > > different IP's. > > > > My mailserver is rejecing thios shit nearly perfect but the server > > has a System- and CPU-load of nearly 100% which make the IMAP server > > unusable and since the sevrer does automated mailprocessing (40.000 > > per day) I hit a real problem. > > > > Now, since most senders (over 90%) have wrong reverse DNS I like to > > know, whether there is a possibility to block such connections on > > the router with iptables and helpers? > > > > Thanks, Greetings and nice Day > > Michelle Konzack > > Systemadministrator > > Tamay Dogan Network > > Debian GNU/Linux Consultant ..snip... ------------------------------------------------------------------------- Check out the new SourceForge.net Marketplace. It's the best place to buy or sell services for just about anything Open Source. http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace ------------------------------------------------------------------------ leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/
