Autor: John Hall Fecha: A: exim-users Asunto: Re: [exim] Running some code rather than having exim log stuff
On 21/03/07, Wouter Verhelst <w@???> wrote:
> Sure enough, this is a spammer (the "gb30472" local part has never
> existed at my domain; it's part of a mutt message-ID that is listed on
> lists.debian.org). When this happens (a host disconnecting without
> properly saying goodbye after giving an invalid local part), I'd like to
> add them to a database so that I can use that as a data point in further
> connection attempts; if they do a sufficient amount of "bad things",
> I'll assume they're spammers and will block them.
Wouter,
I do something similar, but I have a separate process that tails the
exim log file and maintains the database. Once a host has done a
sufficient number of bad things it adds the IP to a list in a file
which is referenced in the ACLs.
