If domain hinet.net is spam, i agree with diego. Add that domain in badmailfrom.
another ways : 1) Adding IP spam domain in Firewall as DROPPED # host hinet.net hinet.net mail is handled by 10 netnews.hinet.net. or # dig hinit.net hinet.net. 10800 IN SOA hntp1.hinet.net. hostmaster.hinet.net. 200605221 21600 7200 3600000 86400 # host netnews.hinet.net netnews.hinet.net has address 168.95.195.16 # host hntp1.hinet.net hntp1.hinet.net has address 168.95.192.1 I think, block this list IP using firewall. In the rules of your firewall, add this : DROPPED net:168.95.195.16,168.95.192.1, etc or DROPPED net:168.95.0.0/netmask ( i dont know this) then restart your firewall. 2) Adding SPAM domain in Qtrap as BANNED WORDS checkall () { case $BANNED_WORDS in *hinet\.net*|PornContain|SexualContain*\*\*\*SPAM\*\*\**|etc...) see documentations at http://www.qmailrocks/qtrap.php 3) Learning SPAM with spamassassin using mailbox who emailed by this domain. Expl. User [EMAIL PROTECTED] recieved email by domain hinet.net, this mail entering in Maildir/new do this : #sa-learn --spam /home/vpopmail/domains/yourdomain.com/guest/Maildir/new/xxxx-contain-email-from-domain-hinet.net-xxx 4) Quick do it!!! may be helping you. 2006/5/23, Diego Pivetta <[EMAIL PROTECTED]>:
Olá amigo I solved this the hinet.net spam I add on file: /var/qmail/control/badmailfrom I add this: @*.hinet.net It´s refuse hinet mail´s on connect , not delivery to qmail queue. =P ----- Original Message ----- From: "Aleksandar Nikolovski" <[EMAIL PROTECTED]> To: <qmailtoaster-list@qmailtoaster.com> Sent: Monday, May 22, 2006 2:34 PM Subject: [qmailtoaster] relay/spam attack My qmailtoaster box was attack from hinet.net sites with a lot messages for a few moments and my mail server crash down. My box working with no problems for 5 months that is CentOS installation. I have only 2 vpopdomains with 20 mail accounts each. I saw at list that by default qmailtoaster accept relay only with smtp auth and I no touching anything at qmail control or tcp.smtp. But huge number of massages arrive at my box and block my server. Maybe I must do additionally setting for relaying or cut time for unauthorized relayers to keep at my server So pls anybody help --------------------------------------------------------------------- QmailToaster hosted by: VR Hosted <http://www.vr.org> --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- Internal Virus Database is out-of-date. Checked by AVG Free Edition. Version: 7.1.392 / Virus Database: 268.5.5/335 - Release Date: 9/5/2006 --------------------------------------------------------------------- QmailToaster hosted by: VR Hosted <http://www.vr.org> --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
--------------------------------------------------------------------- QmailToaster hosted by: VR Hosted <http://www.vr.org> --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]