Re: 7. BCP - Mail Administrators: Checking HELO (was:[Asrg] 0. General - Administrative - for M. Wild)

[Brad Knowles <brad.knowles@skynet.be>]

At 8:04 PM -0500 2003/08/30, Steven F Siirila wrote:

>  We have seen about 1,200,000 different IP addresses connecting to us in the
>  past six months and we block about 1,000,000 SMTP connections on our MX
>  servers every week on average.  What other stats would be of interest?
	What's your breakdown of why those connections are blocked?  How 
many unique blocks are due to which blacklist?  How many unique 
blocks are from lack of rDNS?  How many unique blocks are there by 
domain-based blacklist?  How many unique blocks are there due to 
other techniques?

	I assume that once you have a positive response on one of those 
checks, you reject the connection and you don't bother trying the 
other checks as well.  Could you re-process your data to apply all 
checks to all IP address/envelope sender/recipient combinations, to 
see where certain blocks might overlap?

--
Brad Knowles, <brad.knowles@skynet.be>

"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
    -Benjamin Franklin, Historical Review of Pennsylvania.

GCS/IT d+(-) s:+(++)>: a C++(+++)$ UMBSHI++++$ P+>++ L+ !E-(---) W+++(--) N+
!w--- O- M++ V PS++(+++) PE- Y+(++) PGP>+++ t+(+++) 5++(+++) X++(+++) R+(+++)
tv+(+++) b+(++++) DI+(++++) D+(++) G+(++++) e++>++++ h--- r---(+++)* z(+++)

_______________________________________________
Asrg mailing list
Asrg@ietf.org
https://www1.ietf.org/mailman/listinfo/asrg