On 03/12/2016 02:39 AM, Mathew Simon wrote:
> Hello,
>
> I use fail2ban for managing the attacks to SSHD.
>
> I was wondering whether a filter exist for Amavisd-New, for managing
> the spamers. I see filters exist for most softwares, but a filter does
> notexist for Amavisd or amavisd-new.
>
>
Hi Matt
What would be the objective of this filter, to stop connections to your
mail server from hosts that have been identified as sending spam? You
may end up blocking email you want to receive. For example if someone
spams you from a provider that has legitimate senders, you could end up
blocking mail from legitimate senders and/or be drawn into maintaining a
growing whitelist. It might be better just to let amavis do it's job of
filtering out the spam.
If you want to offload amavis, an alternative approach is to stop the
connections to your incoming email server from known illegitimate
sources via an RBL (like spamhaus or other similar services) and using
fail2ban to block repeating offenders at the firewall. Potentially that
would give less false positives.
John
------------------------------------------------------------------------------
Transform Data into Opportunity.
Accelerate data analysis in your applications with
Intel Data Analytics Acceleration Library.
Click to learn more.
http://pubads.g.doubleclick.net/gampad/clk?id=278785111&iu=/4140
_______________________________________________
Fail2ban-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fail2ban-users
