[OT] sendmail equivalent of zmailer's MaxSameIpSource ??

[Vlad Mazek]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

There is some excellent code in Vispan that you can tweak to do this
with sendmail. Essentially scan the maillog for the logged connections
and write to access.db (or iptables/ipchains) to reject further
connections. By default Vispan only scans for viruses and spam but you
can easilly implement that for any host that shows up in the logs.

You can find more about vispan at http://www.while.homeunix.net/mailstats/

-Vlad

>Hi,
>
>Can anyone point me at a sendmail equivalent of zmailer's MaxSameIPsource ?
>
>I want to limit the maximum number simultaneous connections from a single
>IP, as I've been hit several times over the last few days by 50+ connections
>from a single source that never complete.  A quick look at one IP on
>openrbl suggests this may be spam or virus related, and I will look deeper
>into the problem, but I'd like to put this safeguard in - OOM no fun :(
>
>
>

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!