Saturday, March 15, 2008

auto-banning

I've decided to start auto-banning IP addresses that are sending obvious spam. This is similar to what we do for IP addresses performing ssh probes. However, unlike the ssh blocking script, we throw some code into the qmail-scanner to shoot the IP address to a named pipe where the executable on the other end adds the IP to the netfiler rules. I haven't decided on how long the ban will ban in place for.