On Tue, May 26, 2009 at 12:37:17AM -0700, normallybaffled wrote:
> Here is what I believe i have a problem with:
> When one of our users that "relays" mail thru one of our servers,
> (connecting from a blacklisted ip address -ie in senderbase.org as POOR )
(a) When this happens, is the user authenticated (i.e. using SMTP AUTH)?
If no, then how do you know it's one of your users? Perhaps you've just got
an open relay.
(b) Is the mail being relayed in fact spam?
(c) If it's spam, is it a flood of spam, as opposed to just a handful of
messages?
If yes to both, maybe rate-limiting would help. e.g. only allow X messages per Y
minutes from each user.
> and the recipient is behind a Barracuda, we are finding that we (our mail
> server addresses) are being blacklisted by Barracuda Central.
which is fair enough, if you answered "yes" to (b) above.
--
Dave Evans
http://djce.org.uk/
http://djce.org.uk/pgpkey
