>> ORBS probes come from a single IP address so it's easy just to block
>> them with tcpserver rules. While you're at it, you might as well
>> block some of the other SMTP relay scanners:
>
>Before you do, you should make sure blocking them isn't going to get
>you put on their lists.
Unless you do something else to annoy them, you won't. It hardly matters,
when I was in ORBS the amount of mail that bounced was infinitesimal.
The only blocking system that's widely used is the RBL.
>Also if you don't mind the occasional small amount of traffic, having
>ORBS or one of the others tell you that your mail server is open, is
>better than having abused by spammers when they find it.
My mail server isn't open, and when somone starts rattling each of the
100 virtual IPs on the machine and sending 18 probe messages per IP,
it gets really old really fast.
Regards,
John Levine, [EMAIL PROTECTED], Primary Perpetrator of "The Internet for Dummies",
Information Superhighwayman wanna-be, http://iecc.com/johnl, Sewer Commissioner
Finger for PGP key, f'print = 3A 5B D0 3F D9 A0 6A A4 2D AC 1E 9E A6 36 A3 47
