[Cialug] damn spammers
Paul Gray
gray at cs.uni.edu
Wed Nov 7 10:15:46 CST 2007
Dave Weis wrote:
> chris wrote:
>> For added benefit, try watching the logs for the 550's or NOQUE and
>> dropping in a firewall rule for the next couple of hours for the
>> rejected sender to prevent any more garbage from them. It gives the
>> mail server a chance to catch it's breath before all hell breaks loose
>> again.
>>
>> I used to block for a full week, but it was getting difficult to deal
>> with the memory requirements needed for the millions of iptables
>> rules. :)
>
> Out of 2.5 million encounters with our mail server, there are 225,000
> unique IP addresses based on some processing with cut, sort, and uniq.
No self-respecting scripter would use cut, sort, and uniq without also
using sed, awk, and xargs. Tsk, tsk.
-PG
More information about the Cialug
mailing list