I use rblsmtpd here for stopping unwanted ip's.
Viruses are mostly ssend from dynamic dialin IP's so you can block them
via DJNABL Lists.
Here is my /service/qmail-smtp/run :
#!/bin/sh
QMAILDUID=`id -u vpopmail`
NOFILESGID=`id -g vpopmail`
QMAILQUEUE="/var/qmail/bin/parse.sh" export QMAILQUEUE
MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
exec /usr/local/bin/softlimit -m 15000000 \
/usr/local/bin/tcpserver -v -H -R -l 0 \
-x /home/vpopmail/etc/tcp.smtp.cdb -c "$MAXSMTPD" \
-u "$QMAILDUID" -g "$NOFILESGID" 0 smtp \
/usr/local/bin/rblsmtpd -b -C -r dnsbl-1.uceprotect.net \
-r dnsbl.sorbs.net \
-r list.dsbl.org \
-r dnsbl.njabl.org \
-r sbl-xbl.spamhaus.org \
-r relays.ordb.org \
-r dsn.rfc-ignorant.org \
-r postmaster.rfc-ignorant.org \
-r ipwhois.rfc-ignorant.org \
-r bl.spamcop.net \
/var/qmail/bin/qmail-smtpd \
/home/vpopmail/bin/vchkpw /bin/true 2>&1
> Hi,
>
> I have several domains in a server. One of them is receiving msgs
> from several ips (diferent between them, so it is like a virus). The
> problem is that always have the 'cat concurrencyincoming' connections
> busy. I have chkusr path (included in shupp patches) activated. The
> virus-mails have empty from and try unexisting names in rcpt-to.
> What can I do ?
>
> Thank you in advance,
> Lucas
>
>
