On Wed, May 19, 2010 at 9:58 AM, Stan Hoeppner <s...@hardwarefreak.com> wrote: > punit jain put forth on 5/19/2010 12:52 AM: > >> I am using Postfix as an MTA but I see nowadays lot of spam going out of my >> system. I have used transport based throttling for a domain but I am looking >> for options for per sender based rate limiting. Can I achieve per user based >> throttling using postfix or I have to use some 3rd party software ? > > Throttling is not the solution to fight spam originating within your > network. If you know who is doing it, boot him. If you don't, identify who > it is, then boot him. Period. Why are you playing paddy cakes with a > spammer on your network? > > If this spam is due to php/sql injection, fix/patch or eliminate the hole > that is being exploited instead of trying to throttle it.
Stan, I've seen everything set up per the documents and all the online tests showing that i'm not an open relay. I have no need for external sendmail and I've used all the proper configs and all the suggestions on the list, and I still get some guy with watches for sale who can send mail anyway. When I asked on the list, I was told post my logs etc, which would be very handy for a spammer probably reading this list. What I would like to due is block all sendmail to any address other than those in the virtual file and those originating from localhost. I have no legitimate users that should be able to send anything from the machine. I figured it's be pretty easy, say have some file like used in the various popauth schemes. If the IP address of the connection in not in the list, NO relay. It wasn't. Strict 822RFC is set and it doesn't stop the guy from sending from <> best
