Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 3 > Installation/Configuration

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 17th March 2013, 18:18
fatbear fatbear is offline
Member
 
Join Date: Jul 2010
Location: Raleigh, NC US
Posts: 41
Thanks: 4
Thanked 9 Times in 4 Posts
Default Block all mail, access from certain countries using ipdeny.com data

To try to decrease the flood of spam traffic (inbound e-mail, primarily, but also any other access from certain countries), I was told that I can configure my server to reject anything from certain countries.

For example, suppose I want to block all e-mail and access from IP addresses in China or Nigeria.

I have read some articles (e.g., How to Block All Email from a Country), but I want to make sure that however I do this, that it is an approach that is appropriate to use with ISPConfig.

By the way, it would be nice if ISPConfig had a feature that helps server maintainers do this. It is got to be one of the most painful aspects of server operation and I'm sure most all server operators would be grateful if ISPConfig could help them more directly.

Can anyone please provide some direction so that I can stop the flood of SPAM and other wasteful access?
__________________
Steve Amerige, Fat Bear Incorporated
Server Leasing | Web Software Development | User Experience & Graphic Design
Managed Services, Website, Java, and Source-Code Hosting
Did my post help you? Click the Thanks button!
Reply With Quote
Sponsored Links
  #2  
Old 18th March 2013, 06:08
Parsec Parsec is offline
Member
 
Join Date: Jan 2013
Posts: 66
Thanks: 1
Thanked 9 Times in 8 Posts
 
Default

Interesting, but you have to remember to try and not stop legitimate email.

Personally, I have use something like this but it's my own creation. I have (over time) built up a list of dodgy IP addresses and address blocks that are suspect. What I do is use the access feature of postfix, list them all in there (they are stored in a mysql db with a script that updates the access.cidr), that way I can give these IP's a reject, well error 554, message and direct them to a webpage which has a form they can complete (if they are a genuine sender) to get their IP removed from the list.

This avoids blacklisting legitimate senders (as long as they read the mailserver reply), but of course it does not block like using iptables, postfix just rejects their mail.

Postfix access manual - http://www.postfix.org/access.5.html
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Getting Email Working ISPConfig3 Squirrelmail and Courier etc Ian Wilson Installation/Configuration 17 19th June 2013 22:58
Multiple postfix errors iandoug Server Operation 4 6th February 2013 22:40
installing squirrelmail on Debian with ispconfig3 saco721 Installation/Configuration 18 1st April 2011 17:57
Core 4: Error Messages on Fresh Install re CTX/SSL jjw Installation/Configuration 30 6th September 2006 12:16
Can not recieve mail with de virtual mail adress Mounir Installation/Configuration 9 24th July 2006 23:16


All times are GMT +2. The time now is 17:36.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.