At 10:47 AM 3/10/2003 -0500, William Thompson wrote:
>Is there an easy way to immediately drop people from doing this:
>2003-03-08 07:33:53 SMTP syntax error in "POST / HTTP/1.0"
>H=[199.243.131.42]: unrecognized command
>2003-03-08 07:33:53 SMTP syntax error in "Via: 1.0 TANGO"
>H=[199.243.131.42]: unrecognized command
>2003-03-08 07:33:53 SMTP syntax error in "Host: 216.98.66.34:25"
>H=[199.243.131.42]: unrecognized command
You are seeing spam from open proxies.
Easier way to do it - reactive, shall we say - Find lines like this from
your logs and -
1. Drop them into your local blocklist
2. Submit them to an open proxy blocklist like socks.relays.osirusoft.com etc.
3. Use one or more of these.
srs
