From time to time I get many megabytes of entries like this in my SIMS log:
00:27:19 1 SMTP-365([200.204.198.115]) SPAM? Recipient '<[EMAIL PROTECTED]>' rejected: sending host is blacklisted, "The host is suspected in address harvesting"
Basically someone has a broken program that tries to send to the same failed account several times a second for many hours.
I assume it doesn't come from the same IP each time, or you'd be blocking it in SIMS at least...
At present I am using an older LinkSys NAT box for my "firewall". Ports for POP and SNMP are forwarded to my SIMS box. The current firmware in the LinkSys, and as far as I can tell, the newest firmware available for this model do not allow blocking of specific incoming IP addresses or ranges of addresses.
I'd like an inexpensive hardware router/firewall/NAT box that would allow me to block things like this before it ever gets to SIMS. I much prefer to have my firewall be something other than my server(s). And I'd much prefer to have a device with no moving parts that generates little heat and uses little power, so I'd rather not press an old computer into service for this.
Any suggestions?
Tough customer! ;-)
I believe some of the newer Linksys and other NAT/WiFi boxes can block by IP.
Otherwise, check Ebay. I'll bet you can find something cheap that fits the bill.
-- Bill Christensen http://greenbuilder.com/contact/
Green Building Professionals Directory: http://directory.greenbuilder.com Sustainable Building Calendar: http://www.greenbuilder.com/calendar/ Green Real Estate: http://www.greenbuilder.com/realestate/ Straw Bale Registry: http://sbregistry.greenbuilder.com/ Books/videos/software: http://bookstore.greenbuilder.com/
############################################################# This message is sent to you because you are subscribed to the mailing list <[EMAIL PROTECTED]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
