Hello, I'd just like to know if James somehow supports a feature often called "Tarpitting", or if someone is working on such support.
It simply works this way: If a given host produces too many (x) errors in a given timespan (t), that host will not be allowed to connect to the SMTP Server at all for a given timespan (usually 20 minutes or so). With the SMTP Server I currently use at work (Merak Mailserver), this seems to be the only feature which really works to keep consistent spammers from using up system, and bandwidth resources. It can also stop brute-force SMTP-AUTH breaking attempts, or simple DoS Attacks where the wannabe-hacker reconnects very fast, or simultaneously. If that feature isn't available, I'll try to implement it myself. What do you think would be the best approach ? There could be a mailet in the error and/or spam processors, which logs errors, and puts spammers on a blacklist, and possibly even execute some command to put them on a (dynamic) firewall blacklist. A TimerTask could then be responsible for removing entries from the internal and firewall blacklists. Is there already a Timer class in the framework to register TimerTasks with ? No need to create another Thread if there is one for such purposes already. Which class would have to be modified to drop connection attempts from blacklisted hosts ? with best regards, Kai Londenberg
--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
