Re: [exim] Using GeoIP to block spammers - anyone?

Pàgina inicial
Delete this message
Reply to this message
Autor: Odhiambo G. Washington
Data:  
A: exim-users
Assumpte: Re: [exim] Using GeoIP to block spammers - anyone?
* On 23/06/06 21:07 +0100, Chris Lightfoot wrote:
| On Fri, Jun 23, 2006 at 10:40:25PM +0300, Odhiambo G. Washington wrote:
|     [...]
| >              What I want is to reduce the processing consequent
| > upon spammer transaction, because again, I have disabled spam
| > filtering on the hidden box, instead doing it on the new MX. That
| > new MX is listed as the "highest priority", so everyone delivering
| > mail by MX should be connecting to it.
| 
| ok. so any legitimate connections are from customers who
| will either (a) be connecting from a legitimate IP range;
| or (b) will authenticate before trying a mail transaction.


That is correct!

| So can you not, in the MAIL FROM ACL, drop the connection
| immediately if the user is not in classes (a) or (b)? Or
| are there MUAs which try MAIL FROM and only then
| authenticate?


They use all sorts of MUAs.

| The overhead of doing this should be minimal -- the typical
| spammer would issue ``HELO whatever'', then
| ``MAIL FROM: <whatever>'', and would immediately have the
| connection dropped. Or you could reject the MAIL FROM:
| command -- I assume that would have the same effect.


So basically, you are saying that I should forget about dropping
the connections at acl_smtp_connect and instead shift to either
acl_smtp_helo or acl_smtp_mail, yes?


| (I'm not sure how to drop the connection immediately in an
| ACL -- I thought there might be a control command to do
| it, but in extremis you could, e.g., write a perl function
| that exits the current process, though that's ghastly.)


At acl_smtp_connect, we know the IP address, so at that point
is where I wanted to drop all IPs coming from outside Kenya.


        cheers
       - wash 
+----------------------------------+-----------------------------------------+
Odhiambo Washington                    . WANANCHI ONLINE LTD (Nairobi, KE)  |
wash () WANANCHI ! com            . 1ere Etage, Loita Hse, Loita St.,  |
GSM: (+254) 722 743 223            . # 10286, 00100 NAIROBI             |
GSM: (+254) 733 744 121            . (+254) 020 313 985 - 9             |
+---------------------------------+------------------------------------------+
"Oh My God! They killed init! You Bastards!"  
                         --from a /. post