Due to the recent events of my email server getting hammered from mail harvesting, filling the boxes of my customers im thinking about looking into an email gateway / proxy appliance. Ive seen a couple on the net but can not remember who makes the devices. Im looking to put something in place that will do the following:
Block host if more than X connections / sessions ( example if more than 25 connections from any host delay delivery with 30 second increments for each additional connection ((message 26 30 second delay message 27 60 second delay message 28 90 second delay)) and if more than 50 connections block all connections from host until connections have dropped for 1 hour (( if mail.spam.net has 51 connections to server something like an iptables rule will block all requests from that host. It will check every X minutes to see if connections are closed. Once all connections are closed rule set will self clear, but if another connection attempt is made during deny period counter will reset )) Delay messages with large to and cc. If email has more than 25 to or cc addresses will delay 10 seconds for each address. (( address 26 wait 10 seconds, process address 27 wait 10 seconds, process address 28 wait 10 seconds, process ..... ) And of course blacklist, whitelist and custom rule sets. If there is not something like this on the market I would like to request some help in creating the protection for my server. Also would like to add these features to imail's wishlist if imail is reading this. Thanks in advance Vinny To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
