B. Cook wrote: > Hello all, > > I have these hosts and I'm wondering how I can best keep slow them down, > w/o blocking them completely.. > > would it be better to block on a from? or the helo/ehlo string?.. > > This is the exim suribl check which while it keeps mails from SA (an > immense ammount) the suribl check in exim is quite a cpu intensive > process..
Of those two choices I would block on the HELO, as I believe that would be the earlier block you can do. However, a more efficient solution might be blocking the IP addresses (or net-blocks). Personally, I have experienced similar and have just blocked the IP addresses - because the spammers would try to modify everything else that was possible ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
