hmLoadTopic({
hmKeywords:"Automatic,Automatic IP Screening,IP Screening,IP Screening Automatic,SMTP RCPT threshold,Tarpit Settings,Tarpit Threshold",
hmTitle:"Tarpitting",
hmDescription:"Tarpitting is located under the Security menu at: Security » Security Settings » Other » Tarpitting.",
hmPrevLink:"bandwidth_throttling_tab.html",
hmNextLink:"security--greylisting.html",
hmParentLink:"security_menu.html",
hmBreadCrumbs:"<a href=\"security_menu.html\">Security Menu<\/a> &gt; Security Manager &gt; Other",
hmTitlePath:"Security Menu > Security Manager > Other > Tarpitting",
hmHeader:"<h1 class=\"p_Heading1\" style=\"page-break-after: avoid;\"><span class=\"f_Heading1\">Tarpitting<\/span><\/h1>\n\r",
hmBody:"<p class=\"p_BodyText_Center\"><img style=\"margin:0 auto 0 auto;width:32.5625rem;height:26.9375rem;border:none\" src=\".\/images\/tarpitting.png\"\/><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">Tarpitting is located under the Security menu at: <\/span><span class=\"f_MenuPath\">Security <\/span><span class=\"f_MenuPath\" style=\"font-family: Verdana,Geneva,Arial,sans-serif;\">»<\/span><span class=\"f_MenuPath\"> Security Settings <\/span><span class=\"f_MenuPath\" style=\"font-family: Verdana,Geneva,Arial,sans-serif;\">»<\/span><span class=\"f_MenuPath\"> Other <\/span><span class=\"f_MenuPath\" style=\"font-family: Verdana,Geneva,Arial,sans-serif;\">»<\/span><span class=\"f_MenuPath\"> Tarpitting<\/span><span class=\"f_BodyText\">.<\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">Tarpitting makes it possible for you to deliberately slow down a connection once a specified number of <\/span><span style=\"font-family: \'Courier New\',Courier,monospace; color: #010100;\">RCPT<\/span><span class=\"f_BodyText\"> commands have been received from a message\'s sender. This is to discourage spammers from trying to use your server to send unsolicited bulk email (&quot;spam&quot;). You can specify the number of <\/span><span style=\"font-family: \'Courier New\',Courier,monospace; color: #010100;\">RCPT<\/span><span class=\"f_BodyText\"> commands allowed before tarpitting begins and the number of seconds to delay the connection each time a subsequent command is received from that host during the connection. The assumption behind this technique is that if takes spammers an inordinately long period of time to send each message then that will discourage them from trying to use your server to do so again in the future.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Activate tarpitting<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Click this check box to activate MDaemon<\/span><span style=\"font-family: \'Times New Roman\',Times,Georgia,serif; color: #010100;\">\'<\/span><span class=\"f_ControlIndent\">s tarpitting features.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">SMTP EHLO\/HELO delay (in seconds)<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Use this option to delay the server response to <\/span><span style=\"font-size: 1.10rem; font-family: \'Courier New\',Courier,monospace; color: #010100;\">EHLO<\/span><span class=\"f_ControlIndent\">\/<\/span><span style=\"font-size: 1.10rem; font-family: \'Courier New\',Courier,monospace; color: #010100;\">HELO<\/span><span class=\"f_ControlIndent\"> SMTP commands. Delaying the responses by even as little as ten seconds can potentially save a significant amount of processing time by reducing the amount of spam received. Frequently spammers depend on rapid delivery of their messages and therefore do not wait long for a response to <\/span><span style=\"font-size: 1.10rem; font-family: \'Courier New\',Courier,monospace; color: #010100;\">EHLO<\/span><span class=\"f_ControlIndent\">\/<\/span><span style=\"font-size: 1.10rem; font-family: \'Courier New\',Courier,monospace; color: #010100;\">HELO<\/span><span class=\"f_ControlIndent\"> commands. With even a small delay, spam tools will sometimes give up and move on rather than wait for a response. Connections on the MSA port (designated on the <a href=\"default-domain-and-servers_ports.html\" class=\"topiclink\">Ports<\/a> screen under Server Settings) are always exempt from this delay. The default setting for this option is &quot;0&quot;, meaning <\/span><span style=\"font-size: 1.10rem; font-family: \'Courier New\',Courier,monospace; color: #010100;\">EHLO<\/span><span class=\"f_ControlIndent\">\/<\/span><span style=\"font-size: 1.10rem; font-family: \'Courier New\',Courier,monospace; color: #010100;\">HELO<\/span><span class=\"f_ControlIndent\"> will not be delayed.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Authenticated IPs experience a single EHLO\/HELO delay per day<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Click this check box if you wish to limit the EHLO\/HELO delay to once per day for authenticated connections from a given IP address. The first message from that IP address will be delayed, but any subsequent messages sent from the same IP address will not.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">SMTP RCPT tarpit threshold<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Specify the number of SMTP <\/span><span style=\"font-size: 1.10rem; font-family: \'Courier New\',Courier,monospace; color: #010100;\">RCPT<\/span><span class=\"f_ControlIndent\"> commands that you wish to allow for a given host during a mail session before MDaemon will begin tarpitting that host. For example, if this number was set to 10 and a sending host attempted to send a message to 20 addresses (i.e. 20 <\/span><span style=\"font-size: 1.10rem; font-family: \'Courier New\',Courier,monospace; color: #010100;\">RCPT<\/span><span class=\"f_ControlIndent\"> commands), then MDaemon would allow the first 10 normally and then pause after each subsequent command for the number of seconds specified in the <\/span><span style=\"font-family: Arial,Helvetica,sans-serif; font-style: italic; color: #010100;\">SMTP RCPT tarpit delay<\/span><span class=\"f_ControlIndent\"> control below.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">SMTP RCPT tarpit delay (in seconds)<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Once the <\/span><span style=\"font-family: Arial,Helvetica,sans-serif; font-style: italic; color: #010100;\">SMTP RCPT tarpit threshold<\/span><span class=\"f_ControlIndent\"> is reached for a host, this is the number of seconds that MDaemon will pause after each subsequent <\/span><span style=\"font-size: 1.10rem; font-family: \'Courier New\',Courier,monospace; color: #010100;\">RCPT<\/span><span class=\"f_ControlIndent\"> command is received from that host during the mail session.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Scaling factor<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">This value is a multiplier by which the base tarpit delay will be increased over time. When the tarpit threshold is reached and the tarpit delay is applied to a session, each delay will be multiplied by this value to determine to length of the next delay in the session. For example, if the tarpit delay is set to 10 and the scaling factor is set to 1.5 then the first delay will be 10 seconds, the second will be 15 seconds, the third 22.5, then 33.75, and so on (i.e. 10 x 1.5 = 15, 15 x 1.5 = 22.5, etc.). The default Scaling factor is 1, meaning that the delay will not be increased.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Authenticated sessions are exempt from tarpitting<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Click this checkbox if you want senders who authenticate their mail session to be exempt from Tarpitting.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Exempt list<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Click this button to open the<\/span><span class=\"f_ControlIndent\"> <a href=\"dynamic-screening_dynamic-whitelist.html\" class=\"topiclink\">Dynamic Allow List<\/a>, which is also used for Tarpitting. On it you can designate IP addresses that you wish to be exempt from tarpitting.<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">&nbsp;<\/span><\/p>\n\r"
})
