[qmailtoaster] Re: Blocking more spam

2014-02-25 Thread Eric Shubert
On 02/24/2014 11:06 PM, cj yother wrote: On 02/24/2014 09:37 PM, Eric Shubert wrote: On 02/24/2014 09:16 PM, cj yother wrote: I ban no host name, no rDNS and failed login attempts after 3 tries for 24 hours. It's made a measurable difference on the load on the server. What constitutes

[qmailtoaster] Re: Blocking more spam

2014-02-24 Thread Eric Shubert
On 02/24/2014 11:28 AM, Cecil Yother, Jr. wrote: On 02/24/2014 09:46 AM, Angus McIntyre wrote: On Feb 22, 2014, at 12:18 PM, Eric Shubert e...@shubes.net wrote: It's not a terrible idea though. I wonder if fail2ban could be configured to count DENIED_RDNS messages for each IP address, and if

[qmailtoaster] Re: Blocking more spam

2014-02-24 Thread Eric Shubert
On 02/24/2014 09:16 PM, cj yother wrote: I ban no host name, no rDNS and failed login attempts after 3 tries for 24 hours. It's made a measurable difference on the load on the server. What constitutes no host name? (I think I know what no rDNS is). Failed login attempts are an entirely

Re: [qmailtoaster] Re: Blocking more spam

2014-02-24 Thread cj yother
On 02/24/2014 09:37 PM, Eric Shubert wrote: On 02/24/2014 09:16 PM, cj yother wrote: I ban no host name, no rDNS and failed login attempts after 3 tries for 24 hours. It's made a measurable difference on the load on the server. What constitutes no host name? (I think I know what no rDNS

[qmailtoaster] Re: Blocking more spam

2014-02-22 Thread Eric Shubert
On 02/22/2014 01:50 AM, Tony White wrote: Hi folks, Is this a viable option please? 90% of the SPAM I am getting lately always returns DENIED_RDNS_MISSING or DENIED_RDNS_RESOLVE In all cases the email From User is the same as the Recipient but with prefix or postfix characters. Can we

Re: [qmailtoaster] Re: Blocking more spam

2014-02-22 Thread cj yother
Yes, you can do this and it will reduce the load on the server. When you're hit with a spam message that has no RDNS and they are sending hundreds or thousands to your server it will stop them after x attempts and ban them for x hours/days. This will reduce the load on

Re: [qmailtoaster] Re: Blocking more spam

2014-02-22 Thread Cecil Yother, Jr.
Tony, Why not use the Fail2ban construct? It's all ready to go and uses regular expressions to ban. CJ On 2/22/14 10:07 PM, Tony White wrote: Okay, I have finished the create and delete scripts. Essentially the perl

Re: [qmailtoaster] Re: Blocking more spam

2014-02-22 Thread Tony White
Don't use it, its that simple. best wishes Tony White On 23/02/2014 17:15, Cecil Yother, Jr. wrote: Tony, Why not use the Fail2ban construct? It's all ready to go and uses regular expressions to ban. CJ