I'm talking about the temporary blocking of an IP address that has made x
number of bad recipient attempts in a given amount of time

That's blocking an IP from sending to your known recipients because the IP sends a lot to unknown recipients. Not a good idea in general, since you will block legit MTAs that are spewing backscatter.


Another approach that works well ime is you adding the guard condition of no PTR:

If no PTR, then
 If unknown recipient rejects per <period> greater than <x>,
 then blacklist.

I make the above block a permanent, not temporary, block because of the "double-fault" of no PTR and excessive rejects.

Here's another definition which is probably one of the more widely accepted ones:

http://greylisting.org/

Len


_____________________________________________________________________
http://IMGate.MEIway.com : free anti-spam gateway, runs on 1000's of sites
_____________________________________________________________________
"Our enemies are innovative and resourceful, and so are we,'' shrub said. ``They never stop thinking about new ways to harm our country and our people, and neither do we." 5_Aug_04



To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to