Author: will Date: To: Exim-Users (E-mail) Subject: Re: [Exim] Columbian Spammer
Ron McKeating wrote: > Where would be the best place to put an acl that would simply disconnect
> them every time they tried to connect to our site?
(Sorry about sending this again Ron, I got caught by the gimpy reply-to
settings on the list ;-) )
I saw this with a customers server a couple of years ago. We put in
iptables rules to drop the packets for connections from their IP range
(they seemed to use a few IP's assigned to a brazilian ISP) to port 25.
The continued to attempt to make connections for months despite this.
Obviously an automated attack.
