Urgent - Spam-boat trying to break in the server

Discussion in 'Installation/Configuration' started by pawan, Aug 15, 2010.

  1. pawan

    pawan Member HowtoForge Supporter

    I have already blacklisted the below IP 122.1116.133.64 in Global-Filter-Postfix-Blacklist, but this IP is constantly trying to connect to my server.
    I am getting this IP in my logs repeatedly.

    What else can I do to block this IP to even contact with my server.


    Code:
    Aug 16 02:40:19 server1 postfix/smtpd[20384]: connect from 122-116-113-64.HINET-IP.hinet.net[122.116.113.64]
    Aug 16 02:40:21 server1 postfix/smtpd[20384]: NOQUEUE: reject: RCPT from 122-116-113-64.HINET-IP.hinet.net[122.116.113.64]: 554 5.7.1 : Relay access denied; from= to= proto=SMTP helo=<59.90.144.48>
    Aug 16 02:40:21 server1 postfix/smtpd[20384]: lost connection after RCPT from 122-116-113-64.HINET-IP.hinet.net[122.116.113.64]
    Aug 16 02:40:21 server1 postfix/smtpd[20384]: disconnect from 122-116-113-64.HINET-IP.hinet.net[122.116.113.64]
     
  2. admins

    admins Member

    /etc/hosts.allow
    /etc/hosts.deny
     
  3. falko

    falko Super Moderator ISPConfig Developer

  4. pawan

    pawan Member HowtoForge Supporter

    Dear Falko

    I found the below code in the link given by you

    Code:
    route add -host 62.58.60.226 reject
    I am still troubling you.
    where I should put that code.
    and can I add multiple ip's

    Thanks.
     
  5. falko

    falko Super Moderator ISPConfig Developer

    On the command line.

    Run the command once for each IP.
     

Share This Page