using Vispan with MailScanner

[Richard D Alloway]

On Wed, 6 Dec 2006, Thom Jones wrote:

> On Wednesday 06 December 2006 11:13, Scott Silva wrote:
>> Thom Jones spake the following on 12/6/2006 8:12 AM:
>>> Just a quick question for anyone using Vispan -
>>> Which is preferable?  Blocking at the sendmail access level or blocking
>>> with IPTables?
>>> thanks for any input.
>>
>> If you are already running iptables you can block there. But I am not sure
>> if mail dropped at the firewall shows in the graphs like mail dropped at
>> the MTA.
>>
> Actually, it does.  I changed the config to iptables earlier today and the
> blocked addresses are counting up just fine.
> I was thinking that blocking at the firewall level would be more efficient
> which is what precipitated the question.
> Thanks!

The blocked addresses are added to the list of blocked addresses, yes, but 
the connections rejected at the iptables level are not reflected in the 
"Messages Rejected" graphs or data points.

-Richard D Alloway
  Chief Technical Officer
  Winbeam Inc, A ClearWire Company