On Sep 1, 2010, at 23:14, Cami <[email protected]> wrote:
> On 2010/09/01 06:09 PM, Xueshan Feng wrote: >> Suppose my message quota is 100, my time limit is 2 hours. >> >> I started sending email at 8am. If I reached my quota at 9:50am, >> will I be blocked until 10:00am or 11:50am? > > You would be blocked until 10:00am, i'm not really sure where you get > those other times from. > > >> It seems that the expiration time is calculated by _date + >> _time_limit field in policyd database throttle table. The _date is >> the time of the first message. >> >> Then I would only be blocked for 10 minutes instead of two hours >> starting from when the abuse >> occured? So in theory I can time it so that I'd never be blocked if >> I hit the limit near the time limit mark? > > It's a rolling 2 hour window. You can send 100 messages in that 2 hour > window. > >> Or did I miss understand how does it work? I'd like to be able to >> block based on the time abuse started, not when the timer started. > > The abuse flag triggers when more than 100 messages have attempted > to be > sent > within that rolling 2 hour window. > > Then after that how long the sender would be blocked? If the new rolling window starts at 10:00, the abuse flag is set at 09:59, the sender would be able to send again one minute later, right? Now I understand - policyd does rate limit as it is designed for, but I think the abuse trigger can be used to call some other tools to disable or block the sender. BTW, we are trying to deal with compromised accounts that are used by spammers to send spam, that's why I asked about how long a sender will be blocked. Looks like it depends on where the quota is hit in that rolling window. Thanks Cami for taking the time to reply. Xueshan > _______________________________________________ > Users mailing list > [email protected] > http://lists.policyd.org/mailman/listinfo/users _______________________________________________ Users mailing list [email protected] http://lists.policyd.org/mailman/listinfo/users
