From: Michel B. <mi...@bo...> - 2005-05-17 08:31:57
|
Lionel Bouton a =E9crit : > > I see another problem with this: > when an ISP with which you have a lot of traffic will change a > mailserver IP address, your local MTA will get a lot of new connections > coming in. Having a ceiling for the number of connect entries with the > same src will more or less control the rate of new senders/IP address. > The problem is that you can't reliably detect which IP are legit MTAs > and which are Windows zombies based on this rate alone. > Any thoughts? I don't think it will cause a problem, only a short transition phase. Wha= t will happen is the following : 1/ The ISP's mailserver changes IP and starts sending mail. The first 10 (for example) messages go to "connect", the followings are tarpitted. 2/ About 15-30 minutes later (usually), the mailserver retransmits. The 1= 0 messages in connect are accepted and addresses go to from_awl (those won'= t wait anymore). 10 new entries are available in connect for other new messages now. 3/ Quite probably, the main domains hosted by this ISP will very quicly make it to domain_awl (assuming we receive a high mail traffic from this ISP -- but if we don't, the limit of 10 waiting messages from this source will probably not cause any problem). I think that to determine whether or not this may cause problems, we have to try it out. For I'd love to eliminate from my connect table serie of entries such as: mysql> select src, sender_name, sender_domain from connect where src =3D '68.116.107.206' order by sender_domain; +----------------+----------------------+---------------------+ | src | sender_name | sender_domain | +----------------+----------------------+---------------------+ | 68.116.107.206 | e1ad8f.a6d9d13e57f7 | aol.com | | 68.116.107.206 | e1ad8f.a6d9d13e57f7 | aol.com | | 68.116.107.206 | e1ad8f.a6d9d13e57f7 | aol.com | | 68.116.107.206 | e1ad8f.a6d9d13e57f7 | aol.com | | 68.116.107.206 | amiealexander79 | charterinternet.com | | 68.116.107.206 | amiealexander79 | charterinternet.com | | 68.116.107.206 | amiealexander79 | charterinternet.com | | 68.116.107.206 | amiealexander79 | charterinternet.com | | 68.116.107.206 | amiealexander79 | charterinternet.com | | 68.116.107.206 | amiealexander79 | charterinternet.com | | 68.116.107.206 | amiealexander79 | charterinternet.com | | 68.116.107.206 | amiealexander79 | charterinternet.com | | 68.116.107.206 | amiealexander79 | charterinternet.com | | 68.116.107.206 | amiealexander79 | charterinternet.com | | 68.116.107.206 | amiealexander79 | charterinternet.com | | 68.116.107.206 | amiealexander79 | charterinternet.com | | 68.116.107.206 | amiealexander79 | charterinternet.com | | 68.116.107.206 | amiealexander79 | charterinternet.com | | 68.116.107.206 | amiealexander79 | charterinternet.com | | 68.116.107.206 | amiealexander79 | charterinternet.com | | 68.116.107.206 | amiealexander79 | charterinternet.com | | 68.116.107.206 | amiealexander79 | charterinternet.com | | 68.116.107.206 | amiealexander79 | charterinternet.com | | 68.116.107.206 | amiealexander79 | charterinternet.com | | 68.116.107.206 | service | company.com | | 68.116.107.206 | service | company.com | | 68.116.107.206 | service | company.com | | 68.116.107.206 | service | company.com | | 68.116.107.206 | service | company.com | | 68.116.107.206 | service | company.com | | 68.116.107.206 | service | company.com | | 68.116.107.206 | service | company.com | | 68.116.107.206 | service | company.com | | 68.116.107.206 | service | company.com | | 68.116.107.206 | service | company.com | | 68.116.107.206 | service | company.com | | 68.116.107.206 | service | company.com | | 68.116.107.206 | service | company.com | | 68.116.107.206 | service | company.com | | 68.116.107.206 | service | company.com | | 68.116.107.206 | service | company.com | | 68.116.107.206 | service | company.com | | 68.116.107.206 | service | company.com | | 68.116.107.206 | service | company.com | | 68.116.107.206 | mhammond | cvs.pythonpros.com | | 68.116.107.206 | mhammond | cvs.pythonpros.com | | 68.116.107.206 | mhammond | cvs.pythonpros.com | | 68.116.107.206 | mhammond | cvs.pythonpros.com | | 68.116.107.206 | mhammond | cvs.pythonpros.com | | 68.116.107.206 | mhammond | cvs.pythonpros.com | | 68.116.107.206 | mhammond | cvs.pythonpros.com | | 68.116.107.206 | mhammond | cvs.pythonpros.com | | 68.116.107.206 | mhammond | cvs.pythonpros.com | | 68.116.107.206 | mhammond | cvs.pythonpros.com | | 68.116.107.206 | mhammond | cvs.pythonpros.com | | 68.116.107.206 | mhammond | cvs.pythonpros.com | | 68.116.107.206 | mhammond | cvs.pythonpros.com | | 68.116.107.206 | mhammond | cvs.pythonpros.com | | 68.116.107.206 | mhammond | cvs.pythonpros.com | | 68.116.107.206 | mhammond | cvs.pythonpros.com | | 68.116.107.206 | mhammond | cvs.pythonpros.com | | 68.116.107.206 | mhammond | cvs.pythonpros.com | | 68.116.107.206 | mhammond | cvs.pythonpros.com | | 68.116.107.206 | mhammond | cvs.pythonpros.com | | 68.116.107.206 | webmaster | havilandtelco.com | | 68.116.107.206 | webmaster | havilandtelco.com | | 68.116.107.206 | webmaster | havilandtelco.com | | 68.116.107.206 | webmaster | havilandtelco.com | | 68.116.107.206 | webmaster | havilandtelco.com | | 68.116.107.206 | webmaster | havilandtelco.com | | 68.116.107.206 | webmaster | havilandtelco.com | | 68.116.107.206 | webmaster | havilandtelco.com | | 68.116.107.206 | webmaster | havilandtelco.com | | 68.116.107.206 | webmaster | havilandtelco.com | | 68.116.107.206 | webmaster | havilandtelco.com | | 68.116.107.206 | webmaster | havilandtelco.com | | 68.116.107.206 | webmaster | havilandtelco.com | | 68.116.107.206 | webmaster | havilandtelco.com | | 68.116.107.206 | webmaster | havilandtelco.com | | 68.116.107.206 | webmaster | havilandtelco.com | | 68.116.107.206 | webmaster | havilandtelco.com | | 68.116.107.206 | webmaster | havilandtelco.com | | 68.116.107.206 | webmaster | havilandtelco.com | | 68.116.107.206 | webmaster | havilandtelco.com | | 68.116.107.206 | addressof | hotmail.com | | 68.116.107.206 | addressof | hotmail.com | | 68.116.107.206 | addressof | hotmail.com | | 68.116.107.206 | addressof | hotmail.com | | 68.116.107.206 | ef6d8.651bcdee71d | hotmail.com | | 68.116.107.206 | ef6d8.651bcdee71d | hotmail.com | | 68.116.107.206 | ef6d8.651bcdee71d | hotmail.com | | 68.116.107.206 | ef6d8.651bcdee71d | hotmail.com | | 68.116.107.206 | ef6d8.651bcdee71d | hotmail.com | | 68.116.107.206 | ef6d8.651bcdee71d | hotmail.com | | 68.116.107.206 | ef6d8.651bcdee71d | hotmail.com | | 68.116.107.206 | ef6d8.651bcdee71d | hotmail.com | | 68.116.107.206 | ef6d8.651bcdee71d | hotmail.com | | 68.116.107.206 | ef6d8.651bcdee71d | hotmail.com | | 68.116.107.206 | ef6d8.651bcdee71d | hotmail.com | | 68.116.107.206 | ef6d8.651bcdee71d | hotmail.com | | 68.116.107.206 | ef6d8.651bcdee71d | hotmail.com | | 68.116.107.206 | ef6d8.651bcdee71d | hotmail.com | | 68.116.107.206 | ef6d8.651bcdee71d | hotmail.com | | 68.116.107.206 | ef6d8.651bcdee71d | hotmail.com | | 68.116.107.206 | ef6d8.651bcdee71d | hotmail.com | | 68.116.107.206 | ef6d8.651bcdee71d | hotmail.com | | 68.116.107.206 | ef6d8.651bcdee71d | hotmail.com | | 68.116.107.206 | ef6d8.651bcdee71d | hotmail.com | | 68.116.107.206 | a666.35cddecb9f33 | incredimail.com | | 68.116.107.206 | a666.35cddecb9f33 | incredimail.com | | 68.116.107.206 | a666.35cddecb9f33 | incredimail.com | | 68.116.107.206 | a666.35cddecb9f33 | incredimail.com | | 68.116.107.206 | support | irislink.com | | 68.116.107.206 | support | irislink.com | | 68.116.107.206 | support | irislink.com | | 68.116.107.206 | support | irislink.com | | 68.116.107.206 | admin | let.rug.nl | | 68.116.107.206 | admin | let.rug.nl | | 68.116.107.206 | admin | let.rug.nl | | 68.116.107.206 | admin | let.rug.nl | | 68.116.107.206 | admin | let.rug.nl | | 68.116.107.206 | admin | let.rug.nl | | 68.116.107.206 | admin | let.rug.nl | | 68.116.107.206 | admin | let.rug.nl | | 68.116.107.206 | admin | let.rug.nl | | 68.116.107.206 | admin | let.rug.nl | | 68.116.107.206 | admin | let.rug.nl | | 68.116.107.206 | admin | let.rug.nl | | 68.116.107.206 | admin | let.rug.nl | | 68.116.107.206 | admin | let.rug.nl | | 68.116.107.206 | admin | let.rug.nl | | 68.116.107.206 | admin | let.rug.nl | | 68.116.107.206 | admin | let.rug.nl | | 68.116.107.206 | admin | let.rug.nl | | 68.116.107.206 | admin | let.rug.nl | | 68.116.107.206 | admin | let.rug.nl | | 68.116.107.206 | info | mediaplex.com | | 68.116.107.206 | info | mediaplex.com | | 68.116.107.206 | info | mediaplex.com | | 68.116.107.206 | info | mediaplex.com | | 68.116.107.206 | e-post | motive.com | | 68.116.107.206 | e-post | motive.com | | 68.116.107.206 | e-post | motive.com | | 68.116.107.206 | e-post | motive.com | | 68.116.107.206 | e-post | motive.com | | 68.116.107.206 | e-post | motive.com | | 68.116.107.206 | e-post | motive.com | | 68.116.107.206 | e-post | motive.com | | 68.116.107.206 | e-post | motive.com | | 68.116.107.206 | e-post | motive.com | | 68.116.107.206 | e-post | motive.com | | 68.116.107.206 | e-post | motive.com | | 68.116.107.206 | e-post | motive.com | | 68.116.107.206 | e-post | motive.com | | 68.116.107.206 | e-post | motive.com | | 68.116.107.206 | e-post | motive.com | | 68.116.107.206 | e-post | motive.com | | 68.116.107.206 | e-post | motive.com | | 68.116.107.206 | e-post | motive.com | | 68.116.107.206 | e-post | motive.com | | 68.116.107.206 | draheimcindy | msn.com | | 68.116.107.206 | draheimcindy | msn.com | | 68.116.107.206 | draheimcindy | msn.com | | 68.116.107.206 | draheimcindy | msn.com | | 68.116.107.206 | draheimcindy | msn.com | | 68.116.107.206 | draheimcindy | msn.com | | 68.116.107.206 | draheimcindy | msn.com | | 68.116.107.206 | draheimcindy | msn.com | | 68.116.107.206 | draheimcindy | msn.com | | 68.116.107.206 | draheimcindy | msn.com | | 68.116.107.206 | draheimcindy | msn.com | | 68.116.107.206 | draheimcindy | msn.com | | 68.116.107.206 | draheimcindy | msn.com | | 68.116.107.206 | draheimcindy | msn.com | | 68.116.107.206 | draheimcindy | msn.com | | 68.116.107.206 | draheimcindy | msn.com | | 68.116.107.206 | draheimcindy | msn.com | | 68.116.107.206 | draheimcindy | msn.com | | 68.116.107.206 | draheimcindy | msn.com | | 68.116.107.206 | draheimcindy | msn.com | | 68.116.107.206 | fcffbba.baeb8695fd9 | msn.com | | 68.116.107.206 | fcffbba.baeb8695fd9 | msn.com | | 68.116.107.206 | fcffbba.baeb8695fd9 | msn.com | | 68.116.107.206 | fcffbba.baeb8695fd9 | msn.com | | 68.116.107.206 | fcffbba.baeb8695fd9 | msn.com | | 68.116.107.206 | fcffbba.baeb8695fd9 | msn.com | | 68.116.107.206 | fcffbba.baeb8695fd9 | msn.com | | 68.116.107.206 | fcffbba.baeb8695fd9 | msn.com | | 68.116.107.206 | fcffbba.baeb8695fd9 | msn.com | | 68.116.107.206 | fcffbba.baeb8695fd9 | msn.com | | 68.116.107.206 | fcffbba.baeb8695fd9 | msn.com | | 68.116.107.206 | fcffbba.baeb8695fd9 | msn.com | | 68.116.107.206 | fcffbba.baeb8695fd9 | msn.com | | 68.116.107.206 | fcffbba.baeb8695fd9 | msn.com | | 68.116.107.206 | fcffbba.baeb8695fd9 | msn.com | | 68.116.107.206 | fcffbba.baeb8695fd9 | msn.com | | 68.116.107.206 | fcffbba.baeb8695fd9 | msn.com | | 68.116.107.206 | fcffbba.baeb8695fd9 | msn.com | | 68.116.107.206 | fcffbba.baeb8695fd9 | msn.com | | 68.116.107.206 | fcffbba.baeb8695fd9 | msn.com | | 68.116.107.206 | 3dadbc2ea4fc8bec | oochnblbm.com | | 68.116.107.206 | 3dadbc2ea4fc8bec | oochnblbm.com | | 68.116.107.206 | 3dadbc2ea4fc8bec | oochnblbm.com | | 68.116.107.206 | 3dadbc2ea4fc8bec | oochnblbm.com | | 68.116.107.206 | mailbox | regence.com | | 68.116.107.206 | mailbox | regence.com | | 68.116.107.206 | mailbox | regence.com | | 68.116.107.206 | mailbox | regence.com | | 68.116.107.206 | mailbox | regence.com | | 68.116.107.206 | mailbox | regence.com | | 68.116.107.206 | mailbox | regence.com | | 68.116.107.206 | mailbox | regence.com | | 68.116.107.206 | mailbox | regence.com | | 68.116.107.206 | mailbox | regence.com | | 68.116.107.206 | mailbox | regence.com | | 68.116.107.206 | mailbox | regence.com | | 68.116.107.206 | mailbox | regence.com | | 68.116.107.206 | mailbox | regence.com | | 68.116.107.206 | mailbox | regence.com | | 68.116.107.206 | mailbox | regence.com | | 68.116.107.206 | mailbox | regence.com | | 68.116.107.206 | mailbox | regence.com | | 68.116.107.206 | mailbox | regence.com | | 68.116.107.206 | mailbox | regence.com | | 68.116.107.206 | x-account | regence.com | | 68.116.107.206 | x-account | regence.com | | 68.116.107.206 | x-account | regence.com | | 68.116.107.206 | x-account | regence.com | | 68.116.107.206 | x-account | regence.com | | 68.116.107.206 | x-account | regence.com | | 68.116.107.206 | x-account | regence.com | | 68.116.107.206 | x-account | regence.com | | 68.116.107.206 | x-account | regence.com | | 68.116.107.206 | x-account | regence.com | | 68.116.107.206 | x-account | regence.com | | 68.116.107.206 | x-account | regence.com | | 68.116.107.206 | x-account | regence.com | | 68.116.107.206 | x-account | regence.com | | 68.116.107.206 | x-account | regence.com | | 68.116.107.206 | x-account | regence.com | | 68.116.107.206 | x-account | regence.com | | 68.116.107.206 | x-account | regence.com | | 68.116.107.206 | x-account | regence.com | | 68.116.107.206 | x-account | regence.com | | 68.116.107.206 | f3c7e9ff6d91.4fe2 | rogers.com | | 68.116.107.206 | f3c7e9ff6d91.4fe2 | rogers.com | | 68.116.107.206 | f3c7e9ff6d91.4fe2 | rogers.com | | 68.116.107.206 | f3c7e9ff6d91.4fe2 | rogers.com | | 68.116.107.206 | service | sun.com | | 68.116.107.206 | service | sun.com | | 68.116.107.206 | service | sun.com | | 68.116.107.206 | service | sun.com | | 68.116.107.206 | service | sun.com | | 68.116.107.206 | service | sun.com | | 68.116.107.206 | service | sun.com | | 68.116.107.206 | service | sun.com | | 68.116.107.206 | service | sun.com | | 68.116.107.206 | service | sun.com | | 68.116.107.206 | service | sun.com | | 68.116.107.206 | service | sun.com | | 68.116.107.206 | service | sun.com | | 68.116.107.206 | service | sun.com | | 68.116.107.206 | service | sun.com | | 68.116.107.206 | service | sun.com | | 68.116.107.206 | service | sun.com | | 68.116.107.206 | service | sun.com | | 68.116.107.206 | service | sun.com | | 68.116.107.206 | service | sun.com | | 68.116.107.206 | cf5feabbb.358d7dfdf2 | urth.org | | 68.116.107.206 | cf5feabbb.358d7dfdf2 | urth.org | | 68.116.107.206 | cf5feabbb.358d7dfdf2 | urth.org | | 68.116.107.206 | cf5feabbb.358d7dfdf2 | urth.org | | 68.116.107.206 | webteam | weeklyreader.com | | 68.116.107.206 | webteam | weeklyreader.com | | 68.116.107.206 | webteam | weeklyreader.com | | 68.116.107.206 | webteam | weeklyreader.com | | 68.116.107.206 | bullridin4ever | yahoo.com | | 68.116.107.206 | bullridin4ever | yahoo.com | | 68.116.107.206 | bullridin4ever | yahoo.com | | 68.116.107.206 | bullridin4ever | yahoo.com | | 68.116.107.206 | polloa | yahoo.com | | 68.116.107.206 | polloa | yahoo.com | | 68.116.107.206 | polloa | yahoo.com | | 68.116.107.206 | polloa | yahoo.com | | 68.116.107.206 | polloa | yahoo.com | | 68.116.107.206 | polloa | yahoo.com | | 68.116.107.206 | polloa | yahoo.com | | 68.116.107.206 | polloa | yahoo.com | | 68.116.107.206 | polloa | yahoo.com | | 68.116.107.206 | polloa | yahoo.com | | 68.116.107.206 | polloa | yahoo.com | | 68.116.107.206 | polloa | yahoo.com | | 68.116.107.206 | polloa | yahoo.com | | 68.116.107.206 | polloa | yahoo.com | | 68.116.107.206 | polloa | yahoo.com | | 68.116.107.206 | polloa | yahoo.com | | 68.116.107.206 | polloa | yahoo.com | | 68.116.107.206 | polloa | yahoo.com | | 68.116.107.206 | polloa | yahoo.com | | 68.116.107.206 | polloa | yahoo.com | +----------------+----------------------+---------------------+ 300 rows in set (0.00 sec) mysql> ...and I have quite a number of them... --=20 Michel Bouissou <mi...@bo...> OpenPGP ID 0xDDE8AC6E Appel de 200 Informaticiens pour le NON au Trait=E9 Constitutionnel Europ=E9en: http://www.200informaticiens.ras.eu.org |