>The rate limit setting of 5.  Is that low?  Recommended?

there number would be related to your local volumes for legit MXs.  use 
this report for a full day:

awk '/smtpd.* connect from/{ print $8}' /var/log/maillog |\
   sort -f | uniq -ic | sort -rf | less

Look at the connect 24-hour qty for the BigISP (aol, hotmail, yahoo, msm, 
etc), divide by 48 to get their legit connects per 30 minutes. That should 
be a sanity check.

the "anvil exceptions" param allows you to except MTAs that might have 
legit reason to connect more than you allow with anvil.   ie, list servers 
that send one msg/session, rather than multiple msgs/session. Also, list 
servers that send per-user msgs (unique per user) rather than same msg to 
multiple users.

Len



Reply via email to