Re: [Exim] Columbian Spammer

Ron McKeating wrote:
> Where would be the best place to put an acl that would simply disconnect
> them every time they tried to connect to our site?

(Sorry about sending this again Ron, I got caught by the gimpy reply-to
settings on the list ;-) )

I saw this with a customers server a couple of years ago. We put in
iptables rules to drop the packets for connections from their IP range
(they seemed to use a few IP's assigned to a brazilian ISP) to port 25.
The continued to attempt to make connections for months despite this.
Obviously an automated attack.

Will.