firewall and tarpit spamming clients

["John D. Hardin" <jh...@impsec.org>]

All:

I've updated my firewall-from-sendmail-logs script, and incorporated
labrea to tarpit as many of the offenders as possible.

  http://www.impsec.org/~jhardin/antispam/spammer-firewall

Sendmail and Linux iptables only; if anyone ports it to other popular
firewall languages or MTA log formats I'd be happy to host those
versions as well.

Note that this is reactive, not proactive. It firewalls clients that
sendmail is already blocking via MTA-level DNS RBLs and Greet_Pause in
an attempt to reduce the load on the mail infrastructure (MTA, DNS,
SA) by blocking traffic from repeat offenders.

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  It is not the business of government to make men virtuous or
  religious, or to preserve the fool from the consequences of his own
  folly.                                              -- Henry George
-----------------------------------------------------------------------
 5 days until Bill of Rights day