On Thu, 8 Oct 2020 at 04:03, li...@lazygranch.com <li...@lazygranch.com> wrote: > > Is there something I should be doing to mitigate this problem? > > Oct 8 02:11:42 myserver postfix/smtpd[11630]: connect from > unknown[180.123.163.212] > Oct 8 02:11:43 myserver postfix/smtpd[11632]: connect from > unknown[180.123.163.212] > Oct 8 02:11:43 myserver postfix/smtpd[11632]: lost connection after EHLO > from unknown[180.123.163.212] > Oct 8 02:11:43 myserver postfix/smtpd[11632]: disconnect from > unknown[180.123.163.212] ehlo=1 commands=1 > ... > Oct 8 02:11:55 myserver postfix/smtpd[11632]: warning: Connection rate limit > exceeded: 11 from unknown[180.123.163.212] for service smtp > Oct 8 02:11:55 myserver postfix/smtpd[11632]: disconnect from > unknown[180.123.163.212] commands=0/0 > Oct 8 02:11:55 myserver postfix/smtpd[11630]: connect from > unknown[180.123.163.212] > Oct 8 02:11:55 myserver postfix/smtpd[11630]: warning: Connection rate limit > exceeded: 12 from unknown[180.123.163.212] for service smtp > Oct 8 02:11:55 myserver postfix/smtpd[11630]: disconnect from > unknown[180.123.163.212] commands=0/0 > Oct 8 02:15:15 myserver postfix/anvil[11633]: statistics: max connection > rate 12/60s for (smtp:180.123.163.212) at Oct 8 02:11:55 > Oct 8 02:15:15 myserver postfix/anvil[11633]: statistics: max connection > count 2 for (smtp:180.123.163.212) at Oct 8 02:11:43 > Oct 8 02:15:15 myserver postfix/anvil[11633]: statistics: max cache size 1 > at Oct 8 02:11:42
smtpd is doing what you told it to and apart from the crud in the log I don't think there is a problem. But otherwise, use postscreen + RBLs? This ip address is blocklisted by many RBLs, including zen.spamhaus.org.
