Prev: bounce email
Next: Bypassing content filter or mail filter if one of them crashes out
From: "Josep M." on 29 Mar 2010 15:34
Hello.

One spammer has tried about 300 times send me email, always from the
same address, but from about 20 different IP . Never pass verify sender,
always get 450 error....my question is...when one email fail postfix
verify_sender 4 or 5 times..will be possible auto-blacklist this email
for one week, for example?

I use postfix 2.6.5 and postgrey 1.32


Thanks
Josep

From: Ralf Hildebrandt on 29 Mar 2010 15:41
* Josep M. <websurfer(a)navegants.com>:
> Hello.
>
> One spammer has tried about 300 times send me email, always from the
> same address, but from about 20 different IP . Never pass verify sender,
> always get 450 error....my question is...when one email fail postfix
> verify_sender 4 or 5 times..will be possible auto-blacklist this email
> for one week, for example?

You could use fail2ban for that

--
Ralf Hildebrandt
Geschäftsbereich IT | Abteilung Netzwerk
Charité - Universitätsmedizin Berlin
Campus Benjamin Franklin
Hindenburgdamm 30 | D-12203 Berlin
Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962
ralf.hildebrandt(a)charite.de | http://www.charite.de


From: Kenneth Marshall on 29 Mar 2010 15:47
On Mon, Mar 29, 2010 at 09:34:56PM +0200, Josep M. wrote:
> Hello.
>
> One spammer has tried about 300 times send me email, always from the
> same address, but from about 20 different IP . Never pass verify sender,
> always get 450 error....my question is...when one email fail postfix
> verify_sender 4 or 5 times..will be possible auto-blacklist this email
> for one week, for example?
>
> I use postfix 2.6.5 and postgrey 1.32
>
>
> Thanks
> Josep
>

Wouldn't that open you up to a DoS attack vector against
valid E-mail addresses sending to you?

Cheers,
Ken

From: Brian Evans - Postfix List on 29 Mar 2010 15:44
On 3/29/2010 3:34 PM, Josep M. wrote:
> Hello.
>
> One spammer has tried about 300 times send me email, always from the
> same address, but from about 20 different IP . Never pass verify sender,
> always get 450 error....my question is...when one email fail postfix
> verify_sender 4 or 5 times..will be possible auto-blacklist this email
> for one week, for example?
>
> I use postfix 2.6.5 and postgrey 1.32
>

Google fail2ban or similar log scanning utility.

Postfix only ever looks into a single transaction.

From: "Josep M." on 29 Mar 2010 17:25
Hello Ralph.

Fail2ban can blacklist email addresses too? I want reject email
addresses, not block IPs.

Thanks
Josep


El lun, 29-03-2010 a las 21:41 +0200, Ralf Hildebrandt escribió:
> * Josep M. <websurfer(a)navegants.com>:
> > Hello.
> >
> > One spammer has tried about 300 times send me email, always from the
> > same address, but from about 20 different IP . Never pass verify sender,
> > always get 450 error....my question is...when one email fail postfix
> > verify_sender 4 or 5 times..will be possible auto-blacklist this email
> > for one week, for example?
>
> You could use fail2ban for that
>

 |  Next  |  Last
Pages: 1 2
Prev: bounce email
Next: Bypassing content filter or mail filter if one of them crashes out