OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Hourly Limits

admingg-lab.net
Date: Mon Jul 13 2009 - 04:54:23 CDT


Lucian, i saw that solution, but i want something that can globally
limit EVERY mail sent:

i'll also offer smtp access, and a sendmail wrapper isn't a solution.

Benny: ok, so we are speaking about the evenlope sender, so, it seems
this is the solution.

2009/7/13 Benny Pedersen <mejunc.org>:
>
> On Mon, July 13, 2009 09:51, admingg-lab.net wrote:
>
>> i want to limit mail sent via php mainly, so i can't limit via sasl
>> simply because users aren't authenticated.
>
> remove 127.0.0.1 in mynetworks, and make sasl usage from all what got sent from this box, problem solved, next step is a policy
> server that can handle sasl limits
>
> all else will fail
>
> another way is to seperate web and mail server so 127.0.0.1 is another box :)
>
>> Of course i can't limit the host ip (all mail sent from my webserver).
>
> as Obama says "yes we can" :)
>
>> The most beautiful thing would be limiting system user (each user has
>> an entry in /etc/passwd). Limiting the sender would be unuseful,
>> because all spammers randomiza the sender, bypassing the limit.
>
> randomize there from: but not envelope sender (apachemyhostname)
>
> and this email is unknown in my virtual alias for good reason, apache is local and stays here at so
>
>> Now, i know that cPanel with Exim has a limit of this tipe. I'll
>> request them WHAT is exactly limited (maybe we can replicate with
>> postfix).
>
> dont use cpanel here so cant say how thay mix up the problem
>
>> I'll also write to the postfix-policyd mailing list.
>
> i work on something to fail2ban, will need to write some php and extend policyd 1.80 more to handle this here, point is that none
> have done it before so when i make it, it will be the best :)
>
>> Sahil, maybe we can continue here? Postfixfw rules are completely in
>> topic and maybe we can help someone else...
>
> exactly
>
> --
> xpoint
>
>