Re: [Sqlgrey-users] early reconnect issue

[Marko W. <we...@za...>]

Maybe you also have a look on POSTFIX POSTSCREEN.

http://www.postfix.org/POSTSCREEN_README.html


marko



Am 06.12.2011 20:18, schrieb Robert Schetterer:
> Am 06.12.2011 17:44, schrieb Lionel Bouton:
>> Le 06/12/2011 12:29, Kevin Wincott a écrit :
>>> we currently run sqlgrey across a number of mail cluster servers, 
>>> what
>>> we are seeing on some occasions are servers reconnecting many times 
>>> in
>>> the space of a few seconds, then giving up. has anyone come across 
>>> this
>>> before and how did you get round it?
>
> look at your logs, are these bots, where do they come from ?
> there are bots simply dont care about greylist or any other smtp
> feature, they simple fire
>
> if using postfix ,use postscreen, anyway you dont need to greylist 
> all
> in general, do it only for reverse dns ips looking like dyn ips
> these means selective, you wont see much more spam passing by this 
> way
> and fast legal clients
>
> anotherway is fail2ban, and/or iptables recent
>
> for extrem fast bots i use iptables recent from rsyslog pipe and a 
> shell
> script, i had 5 smtp cons per second in max
> which leads to 0,25 million bot ips during a half day on one server
> mostly from india and brasil
>
>>
>> This isn't standard compliant behaviour (to workaround temporary
>> glitches, mail delivery should be retried for 5 days IIRC).
>>
>> Anyway, there are provisions to support this kind of behaviour in
>> SQLgrey. Most of the time this doesn't require any tuning, but if
>> SQLgrey doesn't manage to recognize these servers, you can whitelist
>> them: see the distributed whitelists for examples.
>> Don't touch the distributedd whitelists (they are overwritten when
>> updating SQLgrey) but place your whitelist entries in the 
>> corresponding
>> *.local files, SQLgrey loads their content on the fly (no need to 
>> restart).
>>
>> You should report the servers with such problem here and the 
>> whitelist
>> entry you used to workaround your problem : if several people report 
>> the
>> same problem, I'll add the whitelist entries to the ones 
>> distributed.
>>
>> Best regards,
>>
>> Lionel
>>
>> 
>> ------------------------------------------------------------------------------
>> Cloud Services Checklist: Pricing and Packaging Optimization
>> This white paper is intended to serve as a reference, checklist and 
>> point of
>> discussion for anyone considering optimizing the pricing and 
>> packaging model
>> of a cloud services business. Read Now!
>> http://www.accelacomm.com/jaw/sfnl/114/51491232/
>> _______________________________________________
>> Sqlgrey-users mailing list
>> Sql...@li...
>> https://lists.sourceforge.net/lists/listinfo/sqlgrey-users
>
>
> --
> Best Regards
>
> MfG Robert Schetterer
>
> Germany/Munich/Bavaria
>
> 
> ------------------------------------------------------------------------------
> Cloud Services Checklist: Pricing and Packaging Optimization
> This white paper is intended to serve as a reference, checklist and 
> point of
> discussion for anyone considering optimizing the pricing and 
> packaging model
> of a cloud services business. Read Now!
> http://www.accelacomm.com/jaw/sfnl/114/51491232/
> _______________________________________________
> Sqlgrey-users mailing list
> Sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlgrey-users