Date: Fri, 20 Apr 2007 13:28:00 -0500 From: "William J.A. Brillinger" <billy (at mark) pdcweb.net> Subject: [coba-e:09638] Re: Ignoring email from specific servers To: coba-e (at mark) bluequartz.org Message-Id: <5s1klg$te5qf (at mark) wnpgmb01-c600f.mts.net> In-Reply-To: <0fe301c78373$a8d445f0$0601a8c0@systemax> References: <5s1ihs$5cnkmt (at mark) wnpgmb02-c600c.mts.net> <0fe301c78373$a8d445f0$0601a8c0 (at mark) systemax> X-Mail-Count: 09638At 12:44 PM 4/20/2007, you wrote: > > > > If I wanted to tell my BQ boxes to ignore emails from a specific set > > of IP's what file would I add these IP's to? > > > > I want to configure a blacklist based on traffic I get into a > > honeypot address that I have had for a long time. > > > > Or is there an easier way? (in addition to Solarspeed's AV/AS suite > > which I am very happy with) > > >Doesn't Solarspeed's AV/AS suite have black-lists? >If not edit /etc/mail/access >Add Ips' or domain names... >65.254.254.50 REJECT SPAM >Or >host.domain.tld REJECT SPAM >Or something similar, note whitespace is <tab> > >Then run 'makemap hash /etc/mail/access.db < /etc/mail/access > >Gerald Thanks Gerald, This is exactly what I wanted to know. Solarspeed's package has per user black and whitelists. My goal is to dynamically block known spam (spam in the spam trap) server wide in a way that also reduces load on the system. By rejecting known spammer ip's before it arrives in mailscanners hands it should reduce the scanning load for the other email accounts. I'll create a script that allows me to block these ip's for a period of time and unblock them again - until another spam arrives. Do any services need to be restarted to use the new access.db? - Bill --------------------------------- William J.A. Brillinger Precision Design Co. E-Mail: mailto:billy (at mark) pdcweb.net Web site: http://www.pdcweb.net Phone: (204) 327-55249638_2.html (attatchment)(tag is disabled)