From: mouss (no email)
Date: Sat Oct 01 2005 - 18:00:11 EDT
Len Conrad a écrit :
>
> One of my clients IMGate/postfix boxes, which does inbound-only MX
> work, has been tarpitted by numerous IPs in these Class Cs:
>
> The Class C are:
>
> 204.9.240
> 204.9.241
> 204.9.242
> 204.9.243
> 204.9.244
> 204.9.245
> 204.9.246
> 204.9.247
>
> which are also found here:
>
> http://www.spamhaus.org/sbl/sbl.lasso?query=SBL21043
>
> afaics, when postfix smtp SAV calls those IPs, the smtp session is
> held by the other end indefinitely, some kind of heart-beat that keeps
> postfix smtp from timing out.
>
Try to minimize the use of SAV. you could use it for specific domains
only, or you could use it if the transaction is suspicious.
Also do SAV after all other tests. you can include unsafe RBLs with a
4xx return code before you do SAV.
|
|
|