|
The one thing I've been doing since the "invasion"
began was use our secondary mail server to block the IP's of infected
machines. Most of the infected messages seem to come through this machine
first. We're running Sendmail (with webmin interface; a lot easier to
admin a linux box) and just editing /etc/mail/access file and adding the
ip's seems to have cut back significantly.
I've added the ip's of blocked computers just to show
how bad it's gotten for us.
68.198.54.158 REJECT
68.21.239.190 REJECT 66.121.151.50 REJECT 12.24.245.12 REJECT 65.16.62.133 REJECT 68.21.234.46 REJECT 24.159.60.200 REJECT 206.241.2.71 REJECT 64.147.6.241 REJECT 67.81.61.57 REJECT 64.30.194.34 REJECT 68.36.190.124 REJECT 68.52.195.199 REJECT 63.164.145.33 REJECT 64.238.101.148 REJECT 68.156.224.121 REJECT 24.170.148.211 REJECT 131.123.194.222 REJECT 65.106.147.178 REJECT 64.42.16.202 REJECT 24.211.10.41 REJECT 200.71.130.17 REJECT 167.206.206.195 REJECT 66.127.198.198 REJECT 162.40.222.119 REJECT 208.40.28.196 REJECT 24.208.129.78 REJECT 207.225.67.82 REJECT 159.247.3.210 REJECT 62.203.100.247 REJECT 67.121.153.139 REJECT 61.171.135.186 REJECT 166.102.18.250 REJECT 208.191.162.43 REJECT 66.207.240.194 REJECT 67.22.187.165 REJECT 66.0.236.20 REJECT 67.124.159.88 REJECT 172.195.161.72 REJECT 218.74.215.84 REJECT 218.4.189.195 REJECT 67.123.8.79 REJECT 24.192.246.239 REJECT 67.35.8.41 REJECT 67.124.156.242 REJECT 218.154.254.90 REJECT 68.211.150.190 REJECT 216.78.60.164 REJECT 24.56.47.175 REJECT 209.145.206.61 REJECT 68.154.104.93 REJECT 24.51.83.89 REJECT 61.11.73.184 REJECT 68.158.221.166 REJECT 209.114.230.52 REJECT 207.233.213.6 REJECT 143.111.23.145 REJECT 68.42.36.205 REJECT 12.224.192.252 REJECT 68.211.189.49 REJECT 192.216.156.19 REJECT 24.228.47.53 REJECT 68.36.3.18 REJECT 209.42.33.176 REJECT 67.124.41.187 REJECT 61.77.77.26 REJECT 62.56.134.108 REJECT 68.211.254.102 REJECT 67.34.231.144 REJECT 68.154.105.182 REJECT 68.75.177.204 REJECT 199.8.235.219 REJECT 64.204.5.34 REJECT 24.51.80.32 REJECT 68.74.150.211 REJECT 218.148.9.3 REJECT 68.42.56.220 REJECT 208.61.30.204 REJECT 12.248.55.60 REJECT 202.69.84.212 REJECT 61.171.70.153 REJECT 24.53.88.127 REJECT 64.223.33.234 REJECT 66.68.84.60 REJECT 67.34.240.3 REJECT 68.158.34.212 REJECT 68.158.98.7 REJECT 162.40.32.115 REJECT 66.228.145.47 REJECT 209.90.85.25 REJECT 213.136.106.126 REJECT 217.164.73.133 REJECT 61.189.204.100 REJECT 200.67.179.81 REJECT 61.189.203.191 REJECT 217.164.72.55 REJECT 61.189.203.246 REJECT 217.164.72.29 REJECT 68.211.224.163 REJECT 200.67.179.50 REJECT 68.80.143.188 REJECT 209.142.243.81 REJECT 204.117.50.140 REJECT 68.154.64.14 REJECT 162.83.176.132 REJECT 65.73.95.99 REJECT 196.21.128.1 REJECT 67.80.139.111 REJECT 68.154.70.39 REJECT 139.55.233.177 REJECT 162.40.37.192 REJECT 62.80.224.31 REJECT 203.129.202.18 REJECT 162.40.38.232 REJECT 162.40.35.90 REJECT 217.23.38.139 REJECT 68.211.233.11 REJECT 67.64.6.246 REJECT 208.180.60.231 REJECT 68.159.166.134 REJECT 67.86.70.25 REJECT 24.99.10.242 REJECT 209.53.213.216 REJECT 138.88.207.116 REJECT 66.76.141.52 REJECT 208.57.145.28 REJECT 66.123.232.6 REJECT 66.13.214.118 REJECT 68.43.11.199 REJECT 207.232.103.155 REJECT 208.57.105.248 REJECT 68.153.69.21 REJECT 66.190.154.21 REJECT 4.41.189.36 REJECT 24.218.40.135 REJECT 216.170.5.59 REJECT 68.113.10.240 REJECT 24.199.82.174 REJECT 68.58.112.228 REJECT 172.128.42.74 REJECT 206.230.185.42 REJECT 65.57.29.48 REJECT 156.110.31.162 REJECT 172.175.113.206 REJECT 24.126.130.151 REJECT 208.255.242.58 REJECT 66.76.135.192 REJECT 65.64.25.225 REJECT 67.34.236.66 REJECT 162.40.37.6 REJECT |
Title: Message
- [Declude.JunkMail] Using Declude to block S... James R. Skivers
- Re: [Declude.JunkMail] Using Declude to... R. Scott Perry
- Re: [Declude.JunkMail] Using Declud... Dan Star
- RE: [Declude.JunkMail] Using De... James R. Skivers
- [Declude.JunkMail] Using D... Rifat Levis
- Re: [Declude.JunkMail] Using De... R. Scott Perry
- RE: [Declude.JunkMail] Using Declud... Kevin Bilbee
- RE: [Declude.JunkMail] Using Declude to... John Tolmachoff \(Lists\)
- RE: [Declude.JunkMail] Using Declud... James R. Skivers
- RE: [Declude.JunkMail] Using De... John Tolmachoff \(Lists\)
- RE: [Declude.JunkMail] Using Declude to... Jeff Maze - Hostmaster
- RE: [Declude.JunkMail] Using Declud... James R. Skivers
- RE: [Declude.JunkMail] scrambled url in source o... Pete - Madscientist
