Hi .
We recently received some kind of Denial of service via spam.
A spammer was sending e-mail with the format
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
The sender address was of the form :
[EMAIL PROTECTED] (always ending with [EMAIL PROTECTED])
before we detected it we already had almost 9000 undeliverable mailer daemon
mails.
Our mail passes first for an antivirus Gateway so we cannot just simply block
the Remote IP via TcpRules
My question is:
is there any patch for qmail-ldap (compatible) to block e-mails based on a
part of the senders e-mail address or by Subject and send them to /dev/null
instead of make the Queue Grow with Mailer-Daemon e-mails ..?
we are currently using qmail 1.03 and qmail-ldap-1.03-20030101.patch
Thanks.
Camilo
--
_____________________________________________________________________________
Cuando un Arquero dispara gratuitamente ..
Tiene consigo toda su habilidad ...
Proverbio Oriental
_____________________________________________________________________________