On Mon, 2009-07-27 at 11:40 +0200, Martijn de Munnik wrote: > Hi, > > I'm using a couple of anti-spam techniques which successfully reject > (5xx) or ban (ipfilter firewall rule) most spam before even getting in > the queue. A couple of days ago about 2600 spam messages where delivered > to an user with a catch-all account. These messages where classified as > SPAM or SPAMMY by spamassassin and where indeed spam. I wonder why these > messages got through at all? > > I use greylisting, blacklists, ban hosts that send one spam message for > 10 minutes (ipfilter) and ban hosts that send three spam messages for > one day (ipfilter). > > Are there ways to block these spam attacks? I don't see any pattern in > ips. Maybe increase the greylist period for the domain under attack (I > don't know how to do that without effecting the other domains). > https://secure.youngguns.nl/mailgraph.cgi#G1
See the attack on friday, 2994 spam messages in that week. On a normal day we receive about 100 spam messages. Met vriendelijke groet, Martijn de Munnik -- YoungGuns Kasteleinenkampweg 7b 5222 AX 's-Hertogenbosch T. 073 623 56 40 F. 073 623 56 39 www.youngguns.nl KvK 18076568
