Re: Deterring mail relay attempts
Alan Chandler <email@example.com> wrote:
> bantime = 86400
I'm up to 129660 (36 hours) so far; like you I've seen 24 hour cycles.
> failregex = \[<HOST>\] .*(?:rejected by local_scan|Unrouteable
> address|relay not permitted)
This similar rule works for me. The callout verification catch is there
because I run an MX for my brother's home network.
failregex = \[<HOST>\] .*(?:rejected by local_scan|Unrouteable (address|user)|rejected RCPT.*(callout verification failure|response.*Unknown user|relay not permitted))