Hi again!

I've tryed that, but they just blame virus etc. And dunno how to proof that
it's virus and nothing else.

I stop all the users I've found so far in firewall my self.. But I'm not by
the box 24/7 to see everything :)

And pretty damn annoying to get removed from all lists etc as you said :(

Anyone else that know if it's possible to block a guy theat send say 500
mail in 3min? 


-- 
Regards,
Johan

-----Ursprungligt meddelande-----
Från: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] För Gerald V. Livingston
II
Skickat: den 17 november 2006 22:20
Till: [email protected]
Ämne: Re: [AMaViS-user] Problem with relay - they spam

On Fri, 17 Nov 2006 21:38:30 +0100 Johan Lindberg <[EMAIL PROTECTED]> wrote:

> Hi there!
> 
> I admin an server for an ISP with around 6.000 customers.
> 
> I've started to get mailattacks from some of our customers.. They send 
> spam at 100MBit == ALOT of shit..
> 
> How can I best stop em? this is the settings I'm running atm..

You're kidding, right? If one of our customers starts sending out spam I
close the account and charge them a SIGNIFICANT cleanup fee.

The last one insisted he wasn't spamming because he was only sending to one
recipient in each message and not using Bcc: to send it to many recipients
at the same time. Of course he sent to 60,000 "single recipients" before I
caught it because of the bounces and rejects piling up in my logs. Wasn't
real happy about me emptying his bank account because he actually used his
debit card/check card to pay for service. Submitted a chargeback. I fought
it and won. Document everything. Save the log files. Save the spam
complaints that go to postmaster. Document every hour you spend getting
de-listed from dnsbl's AND every hour that your servers ARE listed and
having mail bounced because of it..

You're just talking about slowing them down and letting them keep doing it.

If there is some reason you can't close their connection to the Internet
account then at least get your firewall administrator to assist you in
completely blocking their access to port 25. I've removed email priveleges
from some customers who just couldn't figure out how to keep their systems
clean of spam zombie worms. They weren't spammers but they couldn't seem to
keep the real spammers from using their accounts.

Gerald

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's
Techsay panel and you'll get the chance to share your opinions on IT &
business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

--
This message has been scanned for viruses and dangerous content by
MailScanner, and is believed to be clean.


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to