Medium term rate and resources limiting

While Short term rate control takes actions based on values gathered on a short time period (10 minutes) and for all sources, Medium term rate control is intended to take actions based on unwanted or suspect behaviour over a much longer time period (~ 4 hours).

For the moment, the following values are evaluated, but only the first two are directly used to reject connections. The others are used indirectly to reduce privileges or make “life” harder for SMTP clients behaving this way.

Bad recipients
Too many empty connections
Spamtraps
Bad MXs
Too many spams (evaluated by content filters)
Too many virus or xfiles

CHECK_BADRCPTS                 YES
MAX_BADRCPTS                    10
 
CHECK_EMPTY_CONNECTIONS        YES
MAX_EMPTY_CONN                  10

This control can be seen as a dynamic realtime blacklist or some sort of auto maintained dynamic reputation list.

This is a field which is still evolving inside ze-filter and new evaluations and uses are still being created.