Entry

How can I stop a given host from sending too much mail in a set time period?

Can I use frequency of mail from a host to help control spam?

May 18th, 2002 05:33
ismail YENIGUL, Nathan Wallace, Ismail YENIGUL

I use the tar pitting patch..

There are 2 things you can control.

1. Threshold.
2. Delay.

It changes qmail-smtpd so that after each recipient listed on a message
it may insert a delay.

The delay is as long as you tell it in seconds, and it only happens
after Threshold number of recipients have been listed.

There is very rarely legitimate email with more than 15-20 recipients,
so this works great.


hi 
you can use spamguard program written by me and my friend
it is free software, you can get it from 
http://www.enderunix.org/spamguard

here is the description of spamguard
spamGuard scans your MTA log files within fixed intervals, which can be 
defined by yourself,
say 10 minutes, and if an expression " from <user@domain.com>" is 
matched more than
a predefined value, which is of course can be cofigured by yourself, 
spamGuard adds the
mail address to $BADMAILER file.
Therefore any further mails by this user will be rejected by your MTA.

This way, you will have a chance to detect spam before it goes any 
further automagically.

There is also an ignore file, where you put your privileged users.