High CPU load, RCPT TO:
marcel-ml at IRC-ADDICTS.DE
Thu Feb 3 18:26:52 GMT 2005
the method to block or stop mails to unknown recipients seems to be fine.
But the last day i just made tail -f on my maillog, and noticed, that
someone is sending a lot mails to postmaster within seconds.
So, the accout postmaster is existing, but it seems to me that this person
tried to get my maschine into its knees..
is there a way to block someone sending a lot of mails within a few
As these mails where no spam, just mails with some weird content, vispan
did not work, as these mails where not tagged as spam.
So i am wondering if there is a way to have a script looking into the
logfile, and if one ip is sending max-mails within x seconds, add this ip
to he access-file as blocked..
Any ideas would be great
------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
Support MailScanner development - buy the book off the website!
More information about the MailScanner