Russell Nelson([EMAIL PROTECTED])@2001.09.09 23:00:23 +0000:
> Russell Nelson writes:
> > I'm tired of ORBZ scanning/spamming qmail.org (they run qmail
> > themselves; you'd think they would know better). Some days I get more
> > spam from ORBZ than all other sources put together. So, I'm going to
> > block their scans on the SMTP level from now on. If you want to do
> > this too, and you've configured your system as explained in Dave
> > Sill's Life with Qmail, here's what you should do:
> >
> > echo '205.231.149.25:deny' >>/etc/tcp.smtp
> > qmailctl cdb
>
> They have either switched to a different IP address, or else I was
> mistaken about the address they scan from. In any case, I have now
> added 205.231.24.54 to my deny list.
>
> What's so stupid is that ORBZ management is pissing off the very
> people who they should be courting: email sysadmins.
ipfilter...
block in quick on tx0 proto tcp from 205.231.24.54 to 194.162.162.209 port = 25
does the nasty trick
their box will idle out in the tcp session establishment, causing a very
hard time for the admins because their remote connections start to pile up
at their end.
/k
--
> The idea that Bill Gates has appeared like a knight in shining armour
> to lead all customers out of a mire of technological chaos neatly ignores
> the fact that it was he who, by peddling second-rate technology, led them
> into it in the first place. --Douglas Adams in Guardian, August 25, 1995
KR433/KR11-RIPE -- WebMonster Community Founder -- nGENn GmbH Senior Techie
http://www.webmonster.de/ -- ftp://ftp.webmonster.de/ -- http://www.ngenn.net/
karsten&rohrbach.de -- alpha&ngenn.net -- alpha&scene.org -- [EMAIL PROTECTED]
GnuPG 0x2964BF46 2001-03-15 42F9 9FFF 50D4 2F38 DBEE DF22 3340 4F4E 2964 BF46
Please do not remove my address from To: and Cc: fields in mailing lists. 10x
PGP signature
