On Mon, Oct 21, 2024 at 06:06:16PM +0200, Arrigo Triulzi via mailop wrote: > On 21 Oct 2024, at 17:46, Geoff Mulligan via mailop <mailop@mailop.org> wrote: > > I wrote a script to check my mail log and block the IPs. > > I have about 5k different IPs hitting every day. > > > What do you all do? > > OpenBSD, so script to filter IPs from maillog using awk and stick them into a > PF table every 5 minutes or so.
which begs the question, what to do you do to the ones that get thrown into the table? block outright, send them to a tiny queue, or something else entirely? (again fun and games could be had, ie https://nxdomain.no/~peter/forcing_the_password_gropers_through_a_smaller_hole.html or prettified, g-tracked https://bsdly.blogspot.com/2017/04/forcing-password-gropers-through.html) - Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team https://bsdly.blogspot.com/ https://www.bsdly.net/ https://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds. _______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
