From mboxrd@z Thu Jan 1 00:00:00 1970 From: dave@horsfall.org (Dave Horsfall) Date: Thu, 21 Sep 2017 14:14:32 +1000 (EST) Subject: [TUHS] Who is running their own mail server and what do you run? In-Reply-To: References: <20170920162502.GN25650@mcvoy.com> <201709201639.v8KGdGhC024387@darkstar.fourwinds.com> <83CD6BB4-9617-47F9-A87E-55C447D5F1CC@bitblocks.com> <5156de95-caf9-f7e2-6e85-37d957e406bd@tnetconsulting.net> Message-ID: On Wed, 20 Sep 2017, Grant Taylor wrote: Didn't I just see you somewhere else? :-) > I've never thought about a long, multi-line banner. Yep; as I recall, the RFC line length is no more than 254 chars (I think), with no limit on the number of continuation lines. Try connecting to my server at horsfall.org (I'll make you wait around 10 seconds), then check out my RFC-compliant banner... I'll keep an eye out for you in my logs :-) > I agree with the first two, and I'd like to know more about the > effectiveness of the third. Check out www.horsfall.org/spamlog.pdf for a nice pretty graph; the rejects on "banner" is the purple one on the top; the "reject" line is the red one, and the "spam" line (stuff that gets through) is pink (for SPAM, geddit?). Note that many of the "banner" violations are from woodpeckers i.e. they keep trying until they either give up or I notice (and firewall them). The tools behind this are still a work in progress, so I don't currently log the number of "wait" violations etc (it was implemented fairly recently). (And yes, my HTML programming sucks.) -- Dave Horsfall DTM (VK2KFU) "Those who don't understand security will suffer."