micah anderson: > Matus UHLAR - fantomas <uh...@fantomas.sk> writes: > > > welcome to the internet. Can be misconfigured client, spamware somewhere, > > scan, whatever. Firewalling those automatically is the only way to limit > > those messages. > > I'm curious what kind of firewalling rules that people have come > up with to limit these. Are you just doing a fail2ban type reaction, > or have some particular state you are denying? I'd be happy to see > some iptables or even pf examples.
Why bother? Storage is cheap, and repeated logging compresses very well. So it is only a proble, if you keep uncompressed logs forever. Wietse