Date: Fri, 20 Apr 2007 13:59:39 -0500 From: "Gerald Waugh" <gwaugh (at mark) frontstreetnetworks.com> Subject: [coba-e:09639] Re: Ignoring email from specific servers To: <coba-e (at mark) bluequartz.org> Message-Id: <102101c7837e$20bccab0$0601a8c0@systemax> In-Reply-To: <5s1klg$te5qf (at mark) wnpgmb01-c600f.mts.net> X-Mail-Count: 09639Maybe run /etc/init.d/sendmail reload Gerald -----Original Message----- From: William J.A. Brillinger [mailto:billy (at mark) pdcweb.net] Sent: Friday, April 20, 2007 1:28 PM To: coba-e (at mark) bluequartz.org Subject: [coba-e:09638] Re: Ignoring email from specific servers At 12:44 PM 4/20/2007, you wrote: > > If I wanted to tell my BQ boxes to ignore emails from a specific set > of IP's what file would I add these IP's to? > > I want to configure a blacklist based on traffic I get into a > honeypot address that I have had for a long time. > > Or is there an easier way? (in addition to Solarspeed's AV/AS suite > which I am very happy with) > Doesn't Solarspeed's AV/AS suite have black-lists? If not edit /etc/mail/access Add Ips' or domain names... 65.254.254.50 REJECT SPAM Or host.domain.tld REJECT SPAM Or something similar, note whitespace is <tab> Then run 'makemap hash /etc/mail/access.db < /etc/mail/access Gerald Thanks Gerald, This is exactly what I wanted to know. Solarspeed's package has per user black and whitelists. My goal is to dynamically block known spam (spam in the spam trap) server wide in a way that also reduces load on the system. By rejecting known spammer ip's before it arrives in mailscanners hands it should reduce the scanning load for the other email accounts. I'll create a script that allows me to block these ip's for a period of time and unblock them again - until another spam arrives. Do any services need to be restarted to use the new access.db? - Bill --------------------------------- William J.A. Brillinger Precision Design Co. E-Mail: mailto:billy (at mark) pdcweb.net Web site: http://www.pdcweb.net <http://www.pdcweb.net/> Phone: (204) 327-5524 -- This message has been scanned for viruses and dangerous content by <http://www.mailscanner.info/> MailScanner, and is believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.9639_2.html (attatchment)(tag is disabled)