Re: [CentOS] Script to kill dictionary spam attacks

Craig White wrote:

---

there's no way to script that - you have to configure your smtp server and since you don't mention which smtp server you are using nor what you have looked at in terms of documentation, there's little anyone could suggest.

I did find a perl script from 2001 should be effective and I am testing now. It's called rumplekill.pl and the way it works is pretty simple. It greps for "Unknown user" in the last 1,000 entries in /var/log/maillog | counts the occurrences of the ip, if the count > $threshold then it writes that ip to a file /var/log/blocked_ips That's what I need. I am testing now.