Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 3 > Installation/Configuration

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 15th August 2010, 23:26
pawan pawan is offline
Senior Member
 
Join Date: Jul 2010
Posts: 209
Thanks: 42
Thanked 5 Times in 5 Posts
Default Urgent - Spam-boat trying to break in the server

I have already blacklisted the below IP 122.1116.133.64 in Global-Filter-Postfix-Blacklist, but this IP is constantly trying to connect to my server.
I am getting this IP in my logs repeatedly.

What else can I do to block this IP to even contact with my server.


Code:
Aug 16 02:40:19 server1 postfix/smtpd[20384]: connect from 122-116-113-64.HINET-IP.hinet.net[122.116.113.64]
Aug 16 02:40:21 server1 postfix/smtpd[20384]: NOQUEUE: reject: RCPT from 122-116-113-64.HINET-IP.hinet.net[122.116.113.64]: 554 5.7.1 : Relay access denied; from= to= proto=SMTP helo=<59.90.144.48>
Aug 16 02:40:21 server1 postfix/smtpd[20384]: lost connection after RCPT from 122-116-113-64.HINET-IP.hinet.net[122.116.113.64]
Aug 16 02:40:21 server1 postfix/smtpd[20384]: disconnect from 122-116-113-64.HINET-IP.hinet.net[122.116.113.64]
Reply With Quote
Sponsored Links
  #2  
Old 16th August 2010, 09:31
admins admins is offline
Senior Member
 
Join Date: Apr 2009
Location: Switzerland
Posts: 210
Thanks: 6
Thanked 2 Times in 2 Posts
Default

/etc/hosts.allow
/etc/hosts.deny
Reply With Quote
  #3  
Old 16th August 2010, 13:38
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lneburg, Germany
Posts: 41,711
Thanks: 1,900
Thanked 2,703 Times in 2,546 Posts
Default

http://www.howtoforge.com/forums/sho...42&postcount=4
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #4  
Old 16th August 2010, 19:17
pawan pawan is offline
Senior Member
 
Join Date: Jul 2010
Posts: 209
Thanks: 42
Thanked 5 Times in 5 Posts
Default Urgent - Spam-boat trying to break in the server

Dear Falko

I found the below code in the link given by you

Code:
route add -host 62.58.60.226 reject
I am still troubling you.
where I should put that code.
and can I add multiple ip's

Thanks.
Reply With Quote
  #5  
Old 17th August 2010, 18:29
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lneburg, Germany
Posts: 41,711
Thanks: 1,900
Thanked 2,703 Times in 2,546 Posts
 
Default

Quote:
Originally Posted by pawan View Post
where I should put that code.
On the command line.

Quote:
Originally Posted by pawan View Post
and can I add multiple ip's
Run the command once for each IP.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Email doesn't work... Ventzy Installation/Configuration 1 14th February 2010 11:49
My postfix server is beeing used to send large ammounts of spam. bob808 Server Operation 2 27th April 2009 12:37
FTP cannot open remote folder!?! andysm849 Server Operation 23 16th October 2008 23:34
Can't start apache Musty Server Operation 12 9th March 2008 13:58
cacti problem - graphs have huge gaps Chip Installation/Configuration 7 7th February 2008 23:24


All times are GMT +2. The time now is 02:42.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.