Ok, I have a spam place this morning trying multiple servers to get into my mail server:
216.95.201.18, 216.95.201.31, etc. Let's say I want to block him totally at the mail server
using iptables before he gets to Sendmail.


I would do:

iptables -A FORWARD 216.95.201.0/24 -p tcp --dport 25 -j DROP

Does that look right?

Thank you,

-Scott




At 12:48 AM 3/2/2003 -0600, you wrote:




209.8.161.0/24 will get 209.8.161.0 - 209.8.161.255. /16 will get 209.8.0.0 - 209.8.255.255

Is iptables running on your firewall, with the mail server behind it, or on your mail server? If the former, you might need to add this on the FORWARD chain, not INPUT.

Keep in mind that you're blocking all services with that statement. add -p tcp --dport 25 to just block smtp.

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.456 / Virus Database: 256 - Release Date: 2/18/2003
Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com

Reply via email to