audit: > I have put the above in and we've blackholed that IP from connecting at > the router now. Now I'm trying to figure what I'm missing to stop all > the from=<> email's that keep hitting. > > Jul 24 10:27:52 flatlined postfix/smtpd[5121]: connect from > unknown[200.81.211.94] > Jul 24 10:27:53 flatlined postfix/smtpd[5121]: NOQUEUE: reject: RCPT > from unknown[200.81.211.94]: 450 4.7.1 Client host rejected: cannot find > your reverse hostname, [200.81.211.94]; from=<> > to=<[EMAIL PROTECTED]> proto=ESMTP helo=<powerb.Plan> > Jul 24 10:27:54 flatlined postfix/smtpd[5121]: disconnect from > unknown[200.81.211.94]
http://www.postfix.org/BACKSCATTER_README.html may have some usable suggestions. Wietse
