Blocking IPs after a while

[Richard Frovarp]

Marcel Blenkers wrote:
> Hi there everyone,
>
> currently i am seeing a lot of mails towards a user, who does not exist on 
> the mail-server or the system.
>
> There are a lot of different ips, always trying to send to this specific 
> user. So, they are not changing the to-field, they are always trying to 
> send it to this user..
>
> There are about 20 different ips trying to send to this user..some of them 
> belong to some *.jp-domains.
>
> Ok, there is no problem with those ips sending to an unknown user, but 
> they are flooding my maillog ;)
>
> Is there a chance to block those ips automatically?
>
> Like vispan for example.
>
> So i could set up a rule like 
>
> After 10 unknown users block ip for x hours via access-rule..
>
> Any ideas are welcome..
>
> and no, there is no chance to block those ips via firewall, as i do not 
> have the rights to handle the firewall on my own..
> and my provider says, some other users behind the firewall would love to 
> have those mails.. *shrug*
>
> ok..he could setup an individual rule-set for me..told him that..
> answer: "Then i have to setup individual rulesets for everyone"..
>
> Thanks in advance..
>
> Marcel
>
>
>   

You should probably be rejecting mail to unkown users. If you don't have 
the user, what's the point in accepting the mail in the first place?