Robert Chalmers: > This afternoon, over the course of about 4 hours, I?ve logged 741 > connections like this. > > Mar 8 15:05:46 zeus postfix/smtpd[92324]: connect from unknown[185.130.5.90] > Mar 8 15:07:30 zeus postfix/smtpd[92616]: connect from > unknown[131.161.138.190] > Mar 8 15:07:39 zeus postfix/smtpd[92324]: connect from > unknown[113.160.205.81] > Mar 8 15:07:45 zeus postfix/smtpd[92616]: connect from > unknown[181.142.12.223] > Mar 8 15:08:00 zeus postfix/smtpd[92324]: connect from unknown[181.168.4.42] > Mar 8 15:08:00 zeus postfix/smtpd[93053]: connect from > unknown[116.105.182.54]
If the load bothers you, let it be handled by postscreen with a few good DNSBLs (on my machine, that eliminates 90% of inbound SMTP connections; only 10% end up talking to an smtpd process). > So, is the best way of dealing with this list of numbers, and I > can extract - and have extracted - just the ip numbers. Don't waste your time. The odds that the same client keeps coming back are small. Wietse