Hi,
On Tue, Jul 20, 2004 at 07:28:56AM -0700, Robert Bartlett wrote:
> Has anyone tried blocking by ip? Meaning I read somewhere you can block
> access via the tcp.smtp file for qmail. Has anyone done this? If so is this
> a good solution? Would you recommend this? If you do recommend this, then
> what exactly do I look for in the headers to get the proper address to
> block?
We are using Postix with a hashmap of IPs that are blocked for the
reason having been used by spammers recently.
The list of IPs is generated by shell script which scans mail.log and
looks for "Recipient address rejected: User unknown in local recipient
table;" and "Relay access denied", filtered by some "sort" and "uniq -c"
to make sure only those IPs are hit, that sent plenty of spam.
HTH,
Manuel
--
Manuel M�ller | Markusstrasse 31
09130 Chemnitz | Fon: +49 151 127 174 28
www.manuelm.org | [EMAIL PROTECTED]
