> Thanks Grayhat,

Y/W

> I disabled testmode on all HELO checks as recommended 
> and also added the same blacklisted addresses list from the 
> SMTP server.

sounds like a plan :) ... also ensure that the delaying is enabled
and that the recipient validation is correctly configured (either
using LDAP or VRFY) those will help rejecting a whole lot of
junk coming from spambots w/o affecting regular servers

> I reduced the limit to default and i can see some "connection 
> limiting" in the logs so i increased the number to 80. i'll keep 
> monitoring specialy in peak times.

since you're on linux, you may run a "tail -f" agains the maillog
file so that you'll see messages in "real time" that could give
you an idea about the "heartbeat" or your ASSP 

> Do you mean the SMTP idle time ? 

Yes

> I think 25 seconds should be enough 

I'm using 35 seconds, 25 seems somewhat a too short interval
and may cause disconnection issues; I'd suggest you to try the
following

* SMTP Session Limits

MaxErrors    3
maxSMTPSessions 64
maxSMTPipSessions 5
smtpIdleTimeout 35
CheckEalryTalker activated
smtpNOOPIdleTimeout 10
smtpNOOPIdleTimeoutCount 3

* Validate HELO

DoValidFormatHELORe   score
DoInvalidFormatHELORe  block

* IP Blocking

DoDropList        add to denyAlways
DoDenySMTP  block
DoDenySMTPstrict block

* Delaying/GreyListing

EnableDelaying    activated


------------------------------------------------------------------------------
Stay on top of everything new and different, both inside and 
around Java (TM) technology - register by April 22, and save
$200 on the JavaOne (SM) conference, June 2-5, 2009, San Francisco.
300 plus technical and hands-on sessions. Register today. 
Use priority code J9JMT32. http://p.sf.net/sfu/p
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to