Etaoin Shrdlu wrote: > > Okay, here it is. Almost any email directed at the machines is not > valid. I don't care about stopping spam (because if it was actually > directed at a legitimate user, it almost certainly would not be spam), I > care about slowing or stopping the automated attacks. I note Scott's > response on the pf rule, and that's actually not bad, except that the > machines only have Sendmail in common. I have Slackware, Fedora, > FreeBSD, and OpenBSD, all running various versions of sendmail.
It sounds like greylisting and public black lists are what you are looking for. Both are cheap as far as CPU goes. However they both have side-effects: public black lists: you now put your trust in somebody else (I remember this being discussed here before). I use spamhaus, and it has never been an issue for me. grey listing: the first time somebody will send a valid email to one of your users, it will be delayed, possibly rejected for badly configured server. This is the most annoying when they try join a mailing list, it takes a very long time before you receive the confirmation message. -- Yves. http://www.sollers.ca/blog/ _______________________________________________ Discuss mailing list Discuss@lopsa.org http://lopsa.org/cgi-bin/mailman/listinfo/discuss This list provided by the League of Professional System Administrators http://lopsa.org/