> For information: yesterday we rejected > > 117,119 for "HELO localhost" > 35,427 for HELO with our own hostname > 10,940 for HELO with our own IP address (and without [ ] too!) > 4,629 for "HELO friend" > 3,771 for HELO with our own mx name "columbia.edu"
About an hour ago, I added logging (only) for "localhost" and "friend" hits (both something I hadnt been checking for, before). Your numbers for these are impressive, Joe. After the weekend, I'll be interested in seeing how many hits I see for these, in my logs. So far, grepping the logs for each of the Ips hit so far, has shown that the messages from these Ips have all been stopped by other rules. The idea of stopping them earlier in the SMTP conversation, with less horsepower devoted later to blocking them, really appeals to me. Ken _______________________________________________ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list [email protected] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
