>> sounds like a plan :) ... also ensure that the delaying is enabled
>> and that the recipient validation is correctly configured (either
>> using LDAP or VRFY) those will help rejecting a whole lot of
>> junk coming from spambots w/o affecting regular servers

> If i need to enable the VRFY option, all is needed is to add the list
> of   accounts ([email protected]) in the (LocalAddresses_Flat)
> right ?

uhm no :) you'll have to ensure that VRFY is enabled on the mailserver
(or the mailservers) and then use a "special format" for the
localdomains
file; that is, something like this

foobar.com=>1.2.3.4:25
barfoo.net=>1.3.2.5:25
example.com=>5.4.1.2:25


the format is:

domain_name=>mailserver_ip:port

using such a format you'll be telling to ASSP to use the specified
mailserver
(and port) to issue VRFY commands and check for the existence of a given
mailbox this also means that you won't need a separate flatfile
containing
the email addresses since they'll be handled by the mailserver and ASSP
will use VRFY/EXPN to check for their validity (so ensure that HELP,
VRFY
and EXPN are enabled on the mailserver(s)); otherwise you may use LDAP
to check for mailboxes... or ... yes, you may even use a flatfile, but
if then you
will need to ensure that your flatfile will always be "up to date"

> I still see Limiting connection entries in logs.

> Apr-21-09 09:49:26 Limiting total connections
> Apr-21-09 09:49:27 Limiting total connections
> Apr-21-09 09:50:03 Limiting total connections
> Apr-21-09 09:50:03 Limiting total connections

which means that some host is trying to "bash" you hard, leave things as
they are, the limiting is needed to avoid bots and the like DDoS-ing the
server, so that message just means that ASSP is doing its duty; just...
make a note of the offending IP(s)

> All above settings applied.
> Regarding the EnableDelaying, if i may ask please.
> Now at the first SMTP-IN attempt ASSP will send a temp
> error to the sending SMTP server and delay for 5 minutes.

exactly; and to understand how all it works, read this

http://projects.puremagic.com/greylisting/

> I assume the ASSP server checks the message against spam
> at the second attempt right ?

yes... assuming the sender is a real SMTP server and not a spambot :)

> Where does ASSP keeps track of all the delayed messages since
> I see lots of delayed messages in the logs but not sure where it
> stores the triplets.?

you'll find a "delaydb" inside the assp folder


> Thanks

y/w


------------------------------------------------------------------------------
Stay on top of everything new and different, both inside and 
around Java (TM) technology - register by April 22, and save
$200 on the JavaOne (SM) conference, June 2-5, 2009, San Francisco.
300 plus technical and hands-on sessions. Register today. 
Use priority code J9JMT32. http://p.sf.net/sfu/p
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to