[Cialug] damn spammers

Paul Gray gray at cs.uni.edu
Wed Nov 7 10:15:46 CST 2007


Dave Weis wrote:
> chris wrote:
>> For added benefit, try watching the logs for the 550's or NOQUE and
>> dropping in a firewall rule for the next couple of hours for the
>> rejected sender to prevent any more garbage from them.  It gives the
>> mail server a chance to catch it's breath before all hell breaks loose
>> again.
>>
>> I used to block for a full week, but it was getting difficult to deal
>> with the memory requirements needed for the millions of iptables 
>> rules. :)
>
> Out of 2.5 million encounters with our mail server, there are 225,000 
> unique IP addresses based on some processing with cut, sort, and uniq. 

No self-respecting scripter would use cut, sort, and uniq without also 
using sed, awk, and xargs.  Tsk, tsk.

-PG


More information about the Cialug mailing list