-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [EMAIL PROTECTED] wrote: > I have a debian firewall.
Me too, And, I am a user of hinet as well. As far as I know, there are many spammer are using hinet's ip address sending spam out, but not included the hinet's mail server. > Can i disable somehow the *.hinet.net domain in the iptables chain? % [whois.apnic.net node-2] % Whois data copyright terms http://www.apnic.net/db/dbcopyright.html inetnum: 168.95.0.0 - 168.95.255.255 netname: Hinet I don't think that will be a good idea, to block 168.95.0.0/255.255.0.0, I belive hinet has more IP range than that and are still growing, you will never block them all. > I could disable the ip adress of the hinet server but there are many. > They always sending spam to our mail server. A better way to block spam from hinet is only block dail-up and adsl's ip address of hinet, these IPs are all has same reverse domain: .HINET-IP.hinet.net But I don't know how to use iptables to do this, I use postfix to reject mail from hinet's dail-up/adsl IPs. This is my setting in postfix for your reference: /\.HINET-IP\.hinet/ 550 Reject from Hinet IP, please use your ISP's SMTP - -Andrew -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (GNU/Linux) iD8DBQFDBZywnQYz4bYlCYURAlOoAJ9Xie4V6iQOBg1quAvlcchTZk8RngCfUSgh LgOX7ZYvVbp81jDPJ32Zqkw= =xvGx -----END PGP SIGNATURE----- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
