Blocking IPs after a while
Marcel Blenkers
marcel-ml at irc-addicts.de
Tue Jun 19 11:47:53 IST 2007
Hi there everyone,
currently i am seeing a lot of mails towards a user, who does not exist on
the mail-server or the system.
There are a lot of different ips, always trying to send to this specific
user. So, they are not changing the to-field, they are always trying to
send it to this user..
There are about 20 different ips trying to send to this user..some of them
belong to some *.jp-domains.
Ok, there is no problem with those ips sending to an unknown user, but
they are flooding my maillog ;)
Is there a chance to block those ips automatically?
Like vispan for example.
So i could set up a rule like
After 10 unknown users block ip for x hours via access-rule..
Any ideas are welcome..
and no, there is no chance to block those ips via firewall, as i do not
have the rights to handle the firewall on my own..
and my provider says, some other users behind the firewall would love to
have those mails.. *shrug*
ok..he could setup an individual rule-set for me..told him that..
answer: "Then i have to setup individual rulesets for everyone"..
Thanks in advance..
Marcel
More information about the MailScanner
mailing list