Re: [asterisk-users] OT: fail2ban, spam and mail servers

2010-07-13 Thread Hans Witvliet
On Tue, 2010-07-13 at 06:53 -0400, cov...@ccs.covici.com wrote: > What you can do -- I don't know about nomad, but can you make them use > authentication? > > Randy R wrote: > > > On Tue, Jul 13, 2010 at 12:29 PM, wrote: > > > What I do, is only open port 25 to the list of ips of the spam filt

Re: [asterisk-users] OT: fail2ban, spam and mail servers

2010-07-13 Thread Randy R
On Tue, Jul 13, 2010 at 2:45 PM, Gordon Henderson wrote: > Good luck! A few have written me off list (thanks) so I thought I'd close out my own "thoughts" on this. It's been about two hours and it does look like things are working great. I removed the huge number of CONNECT...REJECT statements in

Re: [asterisk-users] OT: fail2ban, spam and mail servers

2010-07-13 Thread Gordon Henderson
On Tue, 13 Jul 2010, Randy R wrote: > Hi Gordon, > > On Tue, Jul 13, 2010 at 1:55 PM, Gordon Henderson > wrote: > >> Technically/pedantically, users ought to be connecting to port 587 to submit >> their email anyway, with port 25 being reserved for MTA to MTA >> communications, so block 25 for ev

Re: [asterisk-users] OT: fail2ban, spam and mail servers

2010-07-13 Thread Randy R
Hi Gordon, On Tue, Jul 13, 2010 at 1:55 PM, Gordon Henderson wrote: > Technically/pedantically, users ought to be connecting to port 587 to submit > their email anyway, with port 25 being reserved for MTA to MTA > communications, so block 25 for everyone but the MX relaying host and insist > you

Re: [asterisk-users] OT: fail2ban, spam and mail servers

2010-07-13 Thread Gordon Henderson
On Tue, 13 Jul 2010, Randy R wrote: On Tue, Jul 13, 2010 at 12:58 PM, A J Stiles wrote: On Tuesday 13 Jul 2010, Randy R wrote: I was thinking of closing port 25 and using an alternate port (587?) setup if the spam service is able to connect to an alternate port. That way, the users can also c

Re: [asterisk-users] OT: fail2ban, spam and mail servers

2010-07-13 Thread Randy R
On Tue, Jul 13, 2010 at 12:58 PM, A J Stiles wrote: > On Tuesday 13 Jul 2010, Randy R wrote: >> I was thinking of closing port 25 and using an alternate port (587?) >> setup if the spam service is able to connect to an alternate port. >> That way, the users can also change their configs to 587 and

Re: [asterisk-users] OT: fail2ban, spam and mail servers

2010-07-13 Thread Randy R
On Tue, Jul 13, 2010 at 12:53 PM, wrote: > What you can do -- I don't know about nomad, but can you make them use > authentication? They do identify, but they have to connect first :) -- _ -- Bandwidth and Colocation Provided

Re: [asterisk-users] OT: fail2ban, spam and mail servers

2010-07-13 Thread A J Stiles
On Tuesday 13 Jul 2010, Randy R wrote: > I was thinking of closing port 25 and using an alternate port (587?) > setup if the spam service is able to connect to an alternate port. > That way, the users can also change their configs to 587 and most > spammers will be trying 25 which is closed. Can't

Re: [asterisk-users] OT: fail2ban, spam and mail servers

2010-07-13 Thread covici
What you can do -- I don't know about nomad, but can you make them use authentication? Randy R wrote: > On Tue, Jul 13, 2010 at 12:29 PM, wrote: > > What I do, is only open port 25 to the list of ips of the spam filtering > > service -- I use an iptables script called rc.firewall which I found

Re: [asterisk-users] OT: fail2ban, spam and mail servers

2010-07-13 Thread Randy R
On Tue, Jul 13, 2010 at 12:29 PM, wrote: > What I do, is only open port 25 to the list of ips of the spam filtering > service -- I use an iptables script called rc.firewall which I found > several years ago which works well and has a nice syntax for this and I > get no direct spam, I get some whi

Re: [asterisk-users] OT: fail2ban, spam and mail servers

2010-07-13 Thread covici
What I do, is only open port 25 to the list of ips of the spam filtering service -- I use an iptables script called rc.firewall which I found several years ago which works well and has a nice syntax for this and I get no direct spam, I get some which gets by the filters. Randy R wrote: > Many of

Re: [asterisk-users] OT: fail2ban, spam and mail servers

2010-07-13 Thread Randy R
On Tue, Jul 13, 2010 at 11:04 AM, dotnetdub wrote: > Hi Randy, > How many users are on this 'domain'? Google Apps Free is a great solution > for upto 50 users with 7.6GB per user. Their spam filtering usually does the > job for our customers. Hi Brian, Thanks for the reply. I'm familiar with Goo

Re: [asterisk-users] OT: fail2ban, spam and mail servers

2010-07-13 Thread dotnetdub
On 13 July 2010 09:52, Randy R wrote: > Many of you are interested in and have used or recommended fail2ban > for your linux boxes. I finally installed it on our FreeBSD server (no > asterisk, hence the OT) with the help of a friend from the VoIP Users > Conference and Asterisk community. > > Aft

[asterisk-users] OT: fail2ban, spam and mail servers

2010-07-13 Thread Randy R
Many of you are interested in and have used or recommended fail2ban for your linux boxes. I finally installed it on our FreeBSD server (no asterisk, hence the OT) with the help of a friend from the VoIP Users Conference and Asterisk community. After a lot of new learning about regex, I extended th