OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
configure postfix to not log NOQUEUE: rejects?

From: Adhamh Findlay (postfixadhamh.com)
Date: Tue Aug 15 2006 - 16:03:46 CDT


Hi,

I'm still being victimized by a joe job/backscatter attack that won't
stop. Its basically to the point where my log file is totally useless.
Today alone I have had 13086 unique ip addresses (each with multiple
events) sending me backscatter. I've started using my firewall to block
any ip address that generates a "NOQUEUE" error, but that seems like
overkill and while it slows down the problem new ip addresses seem to
always get used in this attack.

Since this joe job/backscatter can't be stopped is there a way to get
postfix to not log "NOQUEUE" messages? I could then re-enable this
logging if I needed to troubleshoot something.

Thanks,

Adhamh