We're getting a lot of spam from random addresses @yahoo.com, and policyd is blocking @yahoo.com instead of the individual addresses. We're running v1.8. I looked at the config and there doesn't seem to be a setting to disallow domain blocking. Is there a way to make 1.8 block the individual addresses instead of the whole domain? if we upgrade to v2, will that help? Here are some of the log entries generated when it reaches the blacklisting threshold:
Oct 20 06:09:31 smtp5 policyd: rcpt=9632013, throttle=update(p), host=87.121.119.51, [EMAIL PROTECTED], [EMAIL PROTECTED], size=0/20480000, quota=0/500000000, count=90/100(8829), rcpt=100/100(9607), threshold=0%|89%|99% Oct 20 06:09:38 smtp5 policyd: rcpt=9632042, throttle=abuse(f), host=124.236.241.76, [EMAIL PROTECTED], [EMAIL PROTECTED], size=0/20480000, quota=0/500000000, count=90/100(8829), rcpt=100/100(9607), abuse=5, threshold=0%|90%|100% Oct 20 06:09:38 smtp5 policyd: rcpt=9632042, throttle=blacklisted(f), host=124.236.241.76, [EMAIL PROTECTED], [EMAIL PROTECTED], size=0/20480000, quota=0/500000000, count=90/100(8829), rcpt=100/100(9607), abuse=5, threshold=0%|90%|100% Oct 20 07:39:45 smtp5 policyd: rcpt=9660089, throttle=update(p), host=68.142.201.25, [EMAIL PROTECTED], [EMAIL PROTECTED], size=0/20480000, quota=37891/500000000, count=99/100(9090), rcpt=100/100(9894), threshold=0%|98%|99% Oct 20 07:40:04 smtp5 policyd: rcpt=9660187, throttle=abuse(f), host=88.66.140.213, [EMAIL PROTECTED], [EMAIL PROTECTED], size=0/20480000, quota=37891/500000000, count=99/100(9090), rcpt=100/100(9894), abuse=6, threshold=0%|99%|100% Oct 20 07:40:04 smtp5 policyd: rcpt=9660187, throttle=blacklisted(f), host=88.66.140.213, [EMAIL PROTECTED], [EMAIL PROTECTED], size=0/20480000, quota=37891/500000000, count=99/100(9090), rcpt=100/100(9894), abuse=6, threshold=0%|99%|100% Oct 20 07:40:11 smtp5 policyd: rcpt=9660234, throttle=abuse(f), host=193.226.105.98, [EMAIL PROTECTED], [EMAIL PROTECTED], size=0/20480000, quota=37891/500000000, count=99/100(9090), rcpt=100/100(9894), abuse=6, threshold=0%|99%|100% Oct 20 07:40:11 smtp5 policyd: rcpt=9660234, throttle=blacklisted(f), host=193.226.105.98, [EMAIL PROTECTED], [EMAIL PROTECTED], size=0/20480000, quota=37891/500000000, count=99/100(9090), rcpt=100/100(9894), abuse=6, threshold=0%|99%|100% _______________________________________________ Users mailing list [email protected] http://lists.policyd.org/mailman/listinfo/users
