-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Randy Barlow wrote: > I am getting a huge number of connections to my mail server (postfix) > compared to usual. I've seen as many as 50 connections open at one > time. The logs show that the connections are from several computers of > varying IPs, and they are all trying to send mail to random mailboxes on > my domain. It's very annoying, and I have noticed that inbound mail > seems to be lagging by several hours. Is there something similar to > denyhosts for spammers? Any other suggestions?
Check those IPs against: www.robtex.com/rbl Choose your favorite blacklists (test them, some of them provide too many false positives) and implement with them DNSBL/RBL in your postfix. Also, SPF and greylisting make a good job. Additionally, I recall a Netfilter/iptables module that does dnsbl, too, but... I'd not recommend it. - -- Arturo "Buanzo" Busleiman - Consultor Independiente en Seguridad Informatica Apoye la Musica Libre - Vote Futurabanda desde: (ver sgte. linea) http://www.frecuenciazero.com.ar/realityrock/votar.htm -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHT+R1AlpOsGhXcE0RClWcAJ9FgejSCEeQCTKtIJauIwnGueXQLACdHUZA 5Bf6bMBYal6+LN2rPyJnakY= =Tqvc -----END PGP SIGNATURE----- -- [EMAIL PROTECTED] mailing list
