[IMGate] Re: concerning the new attack via ISP outbound relays

[Andrew P. Kaplan]

Quoting Len Conrad [EMAIL PROTECTED]:


 One short-term tactic would be for IMGate not to trust IMail's IP for
 relaying via mynetworks, but to run SAV/RAV before permit_mynetworks.


Any suggestions for an ISP not running SAV/RAV due to high mail volume 250k/day


Andrew P. Kaplan
www.cshore.com


This message was sent using IMP, the Internet Messaging Program.

[IMGate] Re: concerning the new attack via ISP outbound relays

[Len Conrad]

  One short-term tactic would be for IMGate not to trust IMail's IP for
  relaying via mynetworks, but to run SAV/RAV before permit_mynetworks.
 

Any suggestions for an ISP not running SAV/RAV due to high mail volume 
250k/day

but of the 250K total, how many are outbound? 10%?  That's really not too 
much for SAV/RAV.  postfix's positive/negative caching for SAV/RAV makes it 
probably the best implementation.

You could set up a separate IMGate for outbound only and do SAV/RAV there.

But just IMGate to prevent the spamming from getting out is IMGate SAV/RAV 
rejects as a symptom of your networks being infected.

Len

[IMGate] Re: concerning the new attack via ISP outbound relays

[Andrew P. Kaplan]

Quoting Len Conrad [EMAIL PROTECTED]:


 You could set up a separate IMGate for outbound only and do SAV/RAV there.

Thanks great idea.

Andrew P. Kaplan
www.cshore.com


This message was sent using IMP, the Internet Messaging Program.