Re: [exim] Using GeoIP to block spammers - anyone?

Top Page
Delete this message
Reply to this message
Author: Chris Meadors
Date:  
To: exim-users
Subject: Re: [exim] Using GeoIP to block spammers - anyone?
On Fri, 2006-06-23 at 19:35 +0300, Odhiambo G. Washington wrote:

> I agree with you. Now tell me how much overheard this would add, if I
> knew _all_ the IPs that are geographically in Kenya (via GeoIP):
>
>
> check_connect:
>     drop !hosts = cdb;/path/to/db/with/all_KE-IPs
> accept

>
>
> (or the reversing thereof, of this rule).


That depends on how rapidly the broken mail software that is attempting
to connect retires.

Dropping before the RCPT command will often cause spamware to
immediately retry the connection. Denying after the RCPT just makes the
software think it was a bad address and it moves on.