Hi,


we're providing a small smtp sent-service for our customers (via submission 
port / auth only - postfix). ~ 7.000 outgoing mails / day (via 2 hosts in 
different data centers/ip networks).



As the amount of mails increase, we would like to be ready for



- stolen auth-data to our service is used for sending spam



- broken clients send thousand of mails/minute



- one of our pub-ips get blacklisted / rerouting traffic?



- ISPs block our complete provider networks (and we are included)



- Perm-blocks with 5xx, always return all 5xx to senders?





How do you guys prepare yourself for this?



we have in place:



only allow pre-defined sender-addresses after auth

monitor mail-queues for high connection count

monitor RBLs if we're listed

only allow single mail / 5s to be sent outgoing

anti-virus checking of attachments



Would be awesome to get some insight how "big sites" handle this and maybe 
other cases.



Thank you!



Stefan
_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Reply via email to