> I installed unbound DNS server and xtables-geoip for iptables to drop > a bunch of countries and now CPU usage is down to 30%, mem is down to > 375mb and no crash for the last 15 hours. > > Thanks for all the tips.
You're welcome; as for the xtables-geoip... I don't think that totally blocking a country is a good idea but that btw is up to you; in my case I just can't do that since on some installation I've users which have "legit" contacts around the world; I think that you'd better have a look at the ASSP "IP profiling" feature that will monitor the sending IPs behaviour and, in case some IPs go over a given "limit" they'll be rejected for "extremely bad profile"; such a thing will STILL allow you to get good emails from whatever country but, at the same time will block "bad IPs" so ASSP won't spend time dealing with them ------------------------------------------------------------------------------ _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
