From owner-freebsd-questions@FreeBSD.ORG  Sun Oct 19 18:06:51 2008
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id C0C17106567F
	for <freebsd-questions@freebsd.org>;
	Sun, 19 Oct 2008 18:06:51 +0000 (UTC)
	(envelope-from sahil@tandon.net)
Received: from aegis.hamla.org (aegis.hamla.org [206.251.255.39])
	by mx1.freebsd.org (Postfix) with ESMTP id A1D7B8FC13
	for <freebsd-questions@freebsd.org>;
	Sun, 19 Oct 2008 18:06:51 +0000 (UTC)
	(envelope-from sahil@tandon.net)
Received: from localhost (localhost [127.0.0.1])
	by aegis.hamla.org (Postfix) with ESMTP id 238685C79
	for <freebsd-questions@freebsd.org>;
	Sun, 19 Oct 2008 14:07:37 -0400 (EDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=tandon.net; h=
	x-virus-scanned:in-reply-to:content-disposition:content-type
	:mime-version:references:reply-to:message-id:subject:from:date:
	received; s=aegis; t=1224439654; bh=G+ed3cX9uSxbG8VLUflZvHqf7UMc
	7SA5ih0QUJHXg6o=; b=L8zm2d2hBP4BmnFnYGUuBX2yR/l6ilKh/FfBhRw4ugtZ
	LDx8Lc3mzC52HV606N23b/Bw8WPtriRfeDsDMYZL1q9eWYZGyj2UO03rwZrRq+ou
	Dz1A72sQH0No5d90Xel5d/Jg/d6fQkeb2cSrpqxZMiIutA+aDTiyIkTRgmqjZ68=
Received: from aegis.hamla.org ([127.0.0.1])
	by localhost (aegis.hamla.org [127.0.0.1]) (amavisd-new, port 10027)
	with LMTP id qDzB35UdWWWm for <freebsd-questions@freebsd.org>;
	Sun, 19 Oct 2008 14:07:34 -0400 (EDT)
Date: Sun, 19 Oct 2008 14:06:48 -0400
From: Sahil Tandon <sahil@tandon.net>
To: freebsd-questions@freebsd.org
Message-ID: <20081019180648.GA53695@shepherd>
References: <48FB5F6C.6070205@webrz.net> <20081019173456.GA53615@shepherd>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20081019173456.GA53615@shepherd>
X-Virus-Scanned: ClamAV version 0.94,
	clamav-milter version 0.94 on aegis.hamla.org
X-Virus-Status: Clean
Subject: Re: Postfix communicating with IPFW
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: "freebsd-questions@freebsd.org" <freebsd-questions@freebsd.org>
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 19 Oct 2008 18:06:51 -0000

Sahil Tandon <sahil@tandon.net> wrote:

> Jos Chrispijn <jos@webrz.net> wrote:
> 
> > I recently got attacked with some dsl subscribers of this (imaginary) 
> > some.net domain.
> >
> > These subscribers present themselves as [ip address.dynamic.some.net].
> > Postfix SMTP server: errors from 66-66-66-166.dynamic.some.net 
> > [66.66.66.166]

One more thing: I use the following PCRE to block dynamic-looking IPs at
SMTP and it really isn't resource intensive.

/\d+([-\.]\d+){3}/	REJECT  Generic hostnames prohibited.

-- 
Sahil Tandon <sahil@tandon.net>