Hello Lists, Sunday, March 18, 2018, 11:43:50 AM, you wrote:
> Just checking if I have things set up correctly. I'm returning a 554 > code (rejected relay) yet the attempts keep coming. > Postfix avil is throttling the user, so I assume this isn't a problem. > As an FYI, checking MXTOOL blacklist on the offending IP, only > blocklist.de has them flagged at the moment. 554 or not, that bot doesn't care. I've seen ~500 hits like this in under three minutes from *.hostwindsdns. Same source IP but with TO:mandaditos1...@gmail.com. Never figured out how to report a spammer's test email address to Google. Hostwinds doesn't seem to care either. I guess it's all money in the bank. Anyway, for me, this was the driver to work out how to feed the IP address of offenders back to my firewall for long-term blocking at the front door: postfix > fail2ban > openbgpd > pfsense Phil
