Hi there, We have a machine on the network that has been infected and is sending out spam. The people responsible say the machine has been cleaned and disconnected from the network but this is not the case. It seems they don't know what they are doing and I have decided to rather block the client at the firewall. Endian had transparent smtp proxy enabled.
I added the following IPTables rule iptables -I INPUT 1 -s 192.168.12.12 -j DROP and iptables -I FORWARD 1 -s 192.168.12.12 -j DROP But this has failed to stop the client from connecting and sending spam. What am I missing? ----- http://www.jumpingbean.co.za Jumping bean your java and linux experts http://www.cyberconnect.co.za Cyber Connect - ADSL,3g,HSDPA,iBurst http://www.ip-pbx.co.za VOIP, IP-PBX specialists http://www.onsitetechsupport.co.za On Site IT Support -- View this message in context: http://www.nabble.com/How-to-block-internal-smtp-spam-client-tp22208853p22208853.html Sent from the efw-user mailing list archive at Nabble.com. ------------------------------------------------------------------------------ Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA -OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise -Strategies to boost innovation and cut costs with open source participation -Receive a $600 discount off the registration fee with the source code: SFAD http://p.sf.net/sfu/XcvMzF8H _______________________________________________ Efw-user mailing list Efw-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/efw-user