Linux/IPTables Spam Filter

Bizen | Linux | Recent Changes | Preferences

### Burke's spam filter to prevent outgoing mail floods
#
# THIS WILL ONLY WORK IF YOUR MAILSERVER HAS CONNECTION CACHING DISABLED!!
#
# The first rule is for testing ONLY: log everything!
-A OUTPUT -p tcp --dport 25 -m state --state NEW -j LOG --log-prefix "smtp_sent "
# This is the important part. --limit-burst may not be needed.
-A OUTPUT -p tcp --dport 25 -m state --state NEW -m limit --limit 10/minute --limit-burst 10 -j ACCEPT
# falls through to here.
-A OUTPUT -p tcp --dport 25 -m state --state NEW -j DROP
### End of Burke's spam filter

Bizen | Linux | Recent Changes | Preferences

Last edited December 9, 2010 5:37 pm by Pokute
Search Bizen: