Re: [spamdyke-users] Problems with outgoing SPAM
Jake on the Qmail-Toaster list came up with a couple nice solutions for web pages that can also be applied to email. See http://www.mail-archive.com/qmailtoaster-list@qmailtoaster.com/msg31747.html -- -Eric 'shubes' On 07/18/2011 07:32 PM, Carlos Herrera Polo wrote: > fail2ban maybe ? With special rules I think it can help you > > > > 2011/7/18, BC: >> >> Is this what the "tar pit" option in qmail is suppose to do? >> >> >> On 7/18/2011 11:00 AM, spamdyke-users-requ...@spamdyke.org wrote: >>> I would like to know >>> if spamdyke can block relay if the client is trying to send a lot of >>> email in a small period of time or something else that can ease this >>> problem. >> ___ >> spamdyke-users mailing list >> spamdyke-users@spamdyke.org >> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >> > ___ spamdyke-users mailing list spamdyke-users@spamdyke.org http://www.spamdyke.org/mailman/listinfo/spamdyke-users
Re: [spamdyke-users] Problems with outgoing SPAM
Good morning, For now i am using spamguard, i now it is not a perfect solution, but it is better to have it than have nothing. Thanks. On Fri, 2011-07-22 at 18:23 -0700, Eric Shubert wrote: > Do you know for sure that they're coming from an external source? Could > it be an infected machine that's sending them? > > In either case, I don't know of a way to throttle a user's activity. I > would check the logs for the offending account(s), and change the > password(s). > > Also, be sure that no passwords are ever sent in the clear. > > I wouldn't expect that fail2ban would be of much help, as there's no > failure. I could be wrong about this though. > > I like the way that gmane.org handles this sort of thing. It throttles > user submissions such that it only allows one message to be relayed > every 5 minutes per account. It does accept them, but simply queues them > up and sends them on at a slower pace. I'd like to see a patch to > qmail-remote that would do such a thing, but I'm not aware of one. > Wouldn't be too terribly difficult to code I would think. > ___ spamdyke-users mailing list spamdyke-users@spamdyke.org http://www.spamdyke.org/mailman/listinfo/spamdyke-users
Re: [spamdyke-users] Problems with outgoing SPAM
Do you know for sure that they're coming from an external source? Could it be an infected machine that's sending them? In either case, I don't know of a way to throttle a user's activity. I would check the logs for the offending account(s), and change the password(s). Also, be sure that no passwords are ever sent in the clear. I wouldn't expect that fail2ban would be of much help, as there's no failure. I could be wrong about this though. I like the way that gmane.org handles this sort of thing. It throttles user submissions such that it only allows one message to be relayed every 5 minutes per account. It does accept them, but simply queues them up and sends them on at a slower pace. I'd like to see a patch to qmail-remote that would do such a thing, but I'm not aware of one. Wouldn't be too terribly difficult to code I would think. -- -Eric 'shubes' On 07/18/2011 07:32 PM, Carlos Herrera Polo wrote: > fail2ban maybe ? With special rules I think it can help you > > > > 2011/7/18, BC: >> >> Is this what the "tar pit" option in qmail is suppose to do? >> >> >> On 7/18/2011 11:00 AM, spamdyke-users-requ...@spamdyke.org wrote: >>> I would like to know >>> if spamdyke can block relay if the client is trying to send a lot of >>> email in a small period of time or something else that can ease this >>> problem. >> ___ ___ spamdyke-users mailing list spamdyke-users@spamdyke.org http://www.spamdyke.org/mailman/listinfo/spamdyke-users
Re: [spamdyke-users] Problems with outgoing SPAM
fail2ban maybe ? With special rules I think it can help you 2011/7/18, BC : > > Is this what the "tar pit" option in qmail is suppose to do? > > > On 7/18/2011 11:00 AM, spamdyke-users-requ...@spamdyke.org wrote: >> I would like to know >> if spamdyke can block relay if the client is trying to send a lot of >> email in a small period of time or something else that can ease this >> problem. > ___ > spamdyke-users mailing list > spamdyke-users@spamdyke.org > http://www.spamdyke.org/mailman/listinfo/spamdyke-users > -- Enviado desde mi dispositivo móvil ___ spamdyke-users mailing list spamdyke-users@spamdyke.org http://www.spamdyke.org/mailman/listinfo/spamdyke-users
Re: [spamdyke-users] Problems with outgoing SPAM
Is this what the "tar pit" option in qmail is suppose to do? On 7/18/2011 11:00 AM, spamdyke-users-requ...@spamdyke.org wrote: > I would like to know > if spamdyke can block relay if the client is trying to send a lot of > email in a small period of time or something else that can ease this > problem. ___ spamdyke-users mailing list spamdyke-users@spamdyke.org http://www.spamdyke.org/mailman/listinfo/spamdyke-users
[spamdyke-users] Problems with outgoing SPAM
Hi, This is my first post in this list, i am from Brazil and I apologize for my language errors, my problem is the following: I have a qmail server with Vpopmail and Spamdyke intercepting SMTP connections, most of my customers use SMTP authentication via port 587 (relaying through port 25 is disabled, even with authentication) and POP3, actually i am having troubles with spammers that steal some email address and passwords from my customers and use these credentials to send large amounts of spam through my mail server. When i started to use the port 587 these problems stopped for a period of time, but now i think the spammers are already using this port too. I would like to know if spamdyke can block relay if the client is trying to send a lot of email in a small period of time or something else that can ease this problem. Thanks. ___ spamdyke-users mailing list spamdyke-users@spamdyke.org http://www.spamdyke.org/mailman/listinfo/spamdyke-users
