OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Re[2]: per-ip ADDRESS session limit
From: Wietse Venema (wietseporcupine.org)
Date: Wed Aug 09 2000 - 12:01:30 CDT

Martin McFlySr:
> no, i'm talk about per-ipaddress-limit for incoming smtp sessions.

That is presently not implemented.

> Postfix run as standalone (master), and no otherside tools can't limit
> number of SMTP session per ip address.

Of course they can.

You can have a program that watches the maillog file (*), looking
for the connect/disconnect logfile entries, and adding a REJECT
rule to the SMTPD access table when a client misbehaves, like making
connections too rapidly one after the other, or making too many
connections at the same time.

(*) or that is configured in syslog.conf to receive records directly
from syslogd

> but strange, that sush featured mailer cant limit number of incoming smtp
> session per ip address.....

Your expectations are unrealistic.

> Wietse, what you say?

I say, please explain how one Postfix SMTP server would find out
what clients the other SMTP servers are talking to.

        Wietse