Keith: > >1) Stop allowing auth connections on port 25 at all > > This is controlled via master.cf using -o options under smtp?
>>It would go under the smtpd that serves port 25, as >>smtp pass ... ... ... ... ... smtpd >> -o smtpd_sasl_auth_enable=no That's what I thought. > >2) use postscreen > > One last, is pflogsumm still a valid tool for log stats? >>There is a version that supports postscreen (for example debian). Will take a look. I'm just wondering if all the changes I made are working. But overall it doesn't seem to be blocking what appears to be legit email and the logs look cleaner. Thanks. Keith