From: Robin Lynn Frank (no email)
Date: Wed Dec 01 2004 - 11:15:10 EST
On Wed, 2004-12-01 at 07:01, Kaspars wrote:
> I was interesting to say to those spamers block there ip(close smtp
> connection) for some 10min...
> Have someone done that on FreeBSD?
>
> wrote:
> > Zitat von Kaspars <>:
> >
> >
> >> Hi,
> >>
> >>I just set up postfix smtp server and getting full logs every second with:
> >>Dec 1 16:27:10 core postfix/smtpd[267]: NOQUEUE: reject: RCPT from
> >>TC222-156-21-135.adsl.dynamic.apol.com.tw[222.156.21.135]: 554
> >><>: Relay access denied;
> >>from=<> to=<> proto=ESMTP
> >>helo=<199.221.181.188>
> >>Dec 1 16:27:10 core postfix/smtpd[267]: disconnect from
> >>TC222-156-21-135.adsl.dynamic.apol.com.tw[222.156.21.135]
> >>Dec 1 16:27:19 core postfix/smtpd[266]: connect from unknown[218.5.1.189]
> >>Dec 1 16:27:21 core postfix/smtpd[266]: NOQUEUE: reject: RCPT from
> >>unknown[218.5.1.189]: 554 <>: Relay access denied;
> >>from=<> to=<> proto=ESMTP
> >>helo=<213.21.225.37>
> >>Dec 1 16:27:21 core postfix/smtpd[266]: lost connection after RCPT from
> >>unknown[218.5.1.189]
> >>Dec 1 16:27:21 core postfix/smtpd[266]: disconnect from
> >>unknown[218.5.1.189]
> >>Dec 1 16:27:26 core postfix/smtpd[267]: connect from unknown[218.5.1.189]
> >>Dec 1 16:27:30 core postfix/smtpd[267]: NOQUEUE: reject: RCPT from
> >>unknown[218.5.1.189]: 554 <>: Relay access denied;
> >>from=<> to=<> proto=ESMTP
> >>helo=<213.21.225.37>
> >>Dec 1 16:27:30 core postfix/smtpd[267]: lost connection after RCPT from
> >>unknown[218.5.1.189]
> >>Dec 1 16:27:30 core postfix/smtpd[267]: disconnect from
> >>unknown[218.5.1.189]
> >>
> >>I getting lot of spammers from tw who are trying to send trought me spam
> >>every second...
> >>I can somehow to ignore maybe 10min not to bounce my computer?
> >
> >
> > You don't create any bounces. The only annoyance are the log entries and the
> > kept-busy smtpd daemons. Ignore them or firewall them of by iptables or similar
> > if they are getting to heavy from some IPs.
> >
> > Regards
> >
> > Andreas
> >
There was a perl script watch-maillog.pl that was posted here a couple
of weeks ago. Check the list archives. BTW, it works quite well and
can easily be modified to suit your needs.
-- /"\ ASCII RIBBON Robin Lynn Frank \ / CAMPAIGN Director of Operations X AGAINST Paradigm-Omega, LLC / \ HTML MAIL http://www.paradigm-omega.com/ ===================================================================== Spambots visit http://paradigm-omega.net/cgi-bin/custmail.cgi ===================================================================== If I find that any of our staff voted for Bush, I will fire them.
|
|
|