[NTLUG:Discuss] Be impressed/Be appalled

[Tom Hoover]

On Tue, Jun 10, 2003 at 04:52:47PM -0500, asenec at senechalle.net wrote:
> Pretty much by hand--I have scripts which show me
> what relays were used to send mail discarded as spam.
> I think I have it setup right now to tell me if I have spam incoming
> from 3 or more different addresses in one Class C, on any one
> day, or if more than 15 discards are sent from any one address
> on any one day.  With that data in hand, I grep out the
> indicated C's from the maillog, so I know exactly what I'm 
> putting a firewall up against.  I think depending entirely
> on automation could easily get you in trouble.  

I agree that I don't want to totally automate the process.  I'd been
trying to think of that right balance between manual and automatic.  It
sounds as if you've found that balance...would you mind sharing your
scripts?