[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Spammers hammering our mail servers

My thoughts exactly. I was actually also thinking of getting the script to
add the rule to our satellite receivers and border router as well, but I'll
settle for ipchains on the server for now.

My plan was just a quick script to analyse the logs and block certain IP's,
then have a cron job flush and rebuild the ipchains/iptables rules every
morning. It is more of a nusiance that a major bandwidth/server resources
drain, and I have many other things on my todo list that are more important

I anyone wants to write a more featured program and package it I'm sure a
few people including me would be grateful.

Andrew Tait
System Administrator
Country NetLink Pty, Ltd
E-Mail: andrewt@cnl.com.au
WWW: http://www.cnl.com.au
30 Bank St Cobram, VIC 3644, Australia
Ph: +61 (03) 58 711 000
Fax: +61 (03) 58 711 874

"It's the smell! If there is such a thing." Agent Smith - The Matrix

----- Original Message -----
From: "Russell Coker" <russell@coker.com.au>
To: "Andrew Tait" <andrewt@cnl.com.au>; "Nathan Ridge"
<ridgey@mackay.matilda.net.au>; <debian-isp@lists.debian.org>
Sent: Monday, March 04, 2002 9:29 PM
Subject: Re: Spammers hammering our mail servers

> One advantage of basing such a system on parsing log files is that it
> be possible to write a script that uses log files from different programs.
> Then we could spend more time on getting this done properly, have
> timeouts for blocked IP addresses, have the cache of IP addresses be
> maintained across boots, etc.
> I would be happy to add something like this to my logtools package if
> are code contributions...
> --
> If you send email to me or to a mailing list that I use which has >4 lines
> of legalistic junk at the end then you are specifically authorizing me to
> whatever I wish with the message and all other messages from your domain,
> posting the message you agree that your long legalistic sig is void.
> --
> To UNSUBSCRIBE, email to debian-isp-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact

Reply to: