On Wed, 11 Mar 2026, Tim Harman via Postfix-users wrote:
I guess I can see some value in fail2banning an IP that rspand has flagged as
spam the last 20 times, to stop the CPU overhead of rspamd having to check it
a 21st time.
But that is learnt wisdom correct, or am I holding onto a belief that's not
in fact true?
In terms of stinking up the logs, credential stuffing and just plain
stupidity won't ever get to SPAM scoring because they're not proper
protocol exchanges to begin with.
2026-03-09T21:28:38.182948-07:00 flame postfix/smtpd[23510]: warning:
hostname scan.visionheight.com does not resolve to address 3.129.187.38
2026-03-09T21:28:38.183294-07:00 flame postfix/smtpd[23510]: connect from
unknown[3.129.187.38]
2026-03-09T21:28:38.189818-07:00 flame postfix/smtpd[23512]: warning:
non-SMTP command from unknown[3.129.187.38]: GET / HTTP/1.1
2026-03-09T21:28:38.190229-07:00 flame postfix/smtpd[23510]: warning:
non-SMTP command from unknown[3.129.187.38]: GET / HTTP/1.1
2026-03-09T21:28:38.190545-07:00 flame postfix/smtpd[23512]: disconnect
from unknown[3.129.187.38] unknown=0/1 commands=0/1
2026-03-09T21:28:38.190850-07:00 flame postfix/smtpd[23510]: disconnect
from unknown[3.129.187.38] unknown=0/1 commands=0/1
--
Fred Morris, internet plumber
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
