Re: [vchkpw] Problem about qmail
On -1 xxx -1 [EMAIL PROTECTED] wrote: > Thanks Abel, but I dont have just one IP of spammer buts a lot of Kind, a combination of spamassassin + simscan with rejection at smtp level could help you >and have networks with the ip is Dynamic. use rblsmtpd with well functional DNSBL lists like cbl.abuseat.org relays.ordb.org dul.dnsbl.sorbs.net <- for dynamic ip -not dialup- list.dsbl.org these filter a lot of UCE email from the wild regards, __Abel
Re: [vchkpw] Problem about qmail
Thanks Abel, but I dont have just one IP of spammer buts a lot of Kind, and have networks with the ip is Dynamic. Regards, Thiago > On -1 xxx -1 [EMAIL PROTECTED] wrote: > > > Hi I have one qmail with double-boucetrim.patch, bigconcurrency,rcptchecks > with > > tarpit and tarpit palomine patches but I have a big problem, my server have > 800 > > qmail-smtpd process if I compile qmail without rcptchecks my mail server > stay in > > crash with a lot of process spamd and clamav but I would like to drop this > > connection of spammer if detected, not tarpiting this conect how the > rcptcheck > > do. anybody have one idea? > > Hi Thiago, > if you can identify your spammer ip/subnet watching your qmail-smtpd logs or > directly with a netstat, just include one line in your > ~vpopmail/etc/tcp.smtp > file: > > ip_or_subnet_of_spammer:deny > > after that don't forget run: > (cd ~vpopmail/etc ; tcprules tcp.smtp.cdb tcp.smtp.tmp < tcp.smtp) > to re-generate your ~vpopmail/etc/tcp.smtp.cdb file. > > regards > > __Abel > Thiago Cesar de Oliveira Rodrigues ICQ 41369776 MSN [EMAIL PROTECTED] Yahoo Messeger [EMAIL PROTECTED] http://www.kionux.com.br http://kionux.com.br
Re: [vchkpw] Problem about qmail
On -1 xxx -1 [EMAIL PROTECTED] wrote: > Hi I have one qmail with double-boucetrim.patch, bigconcurrency,rcptchecks > with > tarpit and tarpit palomine patches but I have a big problem, my server have > 800 > qmail-smtpd process if I compile qmail without rcptchecks my mail server stay > in > crash with a lot of process spamd and clamav but I would like to drop this > connection of spammer if detected, not tarpiting this conect how the rcptcheck > do. anybody have one idea? Hi Thiago, if you can identify your spammer ip/subnet watching your qmail-smtpd logs or directly with a netstat, just include one line in your ~vpopmail/etc/tcp.smtp file: ip_or_subnet_of_spammer:deny after that don't forget run: (cd ~vpopmail/etc ; tcprules tcp.smtp.cdb tcp.smtp.tmp < tcp.smtp) to re-generate your ~vpopmail/etc/tcp.smtp.cdb file. regards __Abel
