New answers tagged rate-limiting
Instead of blocking abusers you could add response headers indicating client IP address that broke the rules. Something like this: http-request add-header X-Haproxy-Abuse %ci if connabuse http-request add-header X-Haproxy-Kill %ci if connkill where %ci represents Client IP address, you can log any other param mentioned here: ...
Anyway, i got it working with Fail2Ban by installing Ipset and changing the default Fail2Ban action to use ipset for banning ips.
I would suggest looking into mod_security (https://www.modsecurity.org/). It can rate limit requests, which is probably what you're looking for.
My doubt is, does Postfix consider an email of such characteristics (300 recipients) as only one "delivery requests"? Yes. In fact, the default limit of recipient per delivery request is 1000. See postconf smtpd_recipient_limit and the man page If you want limit recipient, use smtpd_client_recipient_rate_limit. A little note from this page ...
Top 50 recent answers are included