From: Alexander Grüner (agruenergmx.de)
Date: Thu Apr 26 2007 - 01:34:20 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi,

there is almost daily the situation that a new worm, spam etc. is going
around.

There is always the same pattern. The mail is coming e.g. from
infofocus.de. The recipient is always different, but mostly valid (I
have about 4000 Users), but the sending MX is of course mostly different.

Normally if I see somthing like this, I am going to manually block this
sender (e.g. infofocus.de) for 2 days.

Can you somehow limit this automatically similar to something like a
rate limit ?

If the same sender is coming from n different domains, then block it for
time interval x ? Any ideas ?

My postfix antispam solution is already blocking 99,8 % of spam, but in
case of infofocus.de we received about 14000 delivery attempts. So more
than 20 are still delivered, with 20 possible people clicking on
whatever...(yes, they know not to click and have a antivirus)....

Regards,
Alexander

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]