Improve Dynamic Screening
It would be great if we could block ips which are sending to unknown recipients or sending confirmed spam into a specified period of time.
i.e. if one IP sends more than "X" confirmed spam mails in less than "Y" minutes, then block that IP for "Z" minutes.
If one IP is proving email addresses, and causes "X" recipient unknown responses in less than "Y" minutes, then block that IP for "Z" minutes.
Alfredo Martínez
shared this idea
Hello,
Thank you for sharing your idea with us.
MDaemon is capable of blocking IPs that cause X recipient unknown responses. To configure this open MDaemon and go to Setup / Security / Dynamic Screening. Enter a value in the “Block IPs that cause this many failed RCPTs”
MDaemon is not currently capable of blocking IPs that attempt to send more than X confirmed spam messages. This could be a dangerous feature if your spam filter were mis-configured but we will look into it further.
Thanks,
Arron
-
No problem, glad I could help.
Thanks again for contributing!
Arron
-
Alfredo Martínez
commented
Hello again Arron...You're totally right...Number of connections per period of time addresses the issue...Sorry for the inconvenience....
-
Hello,
Thanks for providing additional details. Doesn't the ability to block IPs that connect more than X times in Y minutes prevent abusers from bypassing the ability to block IPs that cause Z failed RCPTs?
-
Alfredo Martínez
commented
Hello Arron, MDaemon actually is able to block IPs that cause X recipient unkown responses, but just into one same session. Just thinking in several different sessions...one can bypass this protection just proving one single email address for single session....I have seen this before...
Thanks for review my idea