Robert Sharp:
> Hi,
>
> I often get a spate of lost connections from servers chancing to access
> my email via SMTP AUTH (which I do not offer), and I usually ignore
> them. I may get a session with up to 1,000+ connections usually from a
> whole list of servers and none trying more than a dozen times.
>
> Yesterday, however, I got 10,000+ lost connections from one IP address
> (178.150.135.178) in a continuous assault lasting several hours. I limit
> connections from the wan on port 25 to 1/s so I can only imagine the
> number of attempts I might have got if I did not.
postscreen would block this IP address with zen.spamhaus.org. The
bot would not be allowed to talked to a Postfix SMTP daemon.
Wietse
