If domain hinet.net is spam, i agree with diego.
Add that domain in badmailfrom.
another ways :
1) Adding IP spam domain in Firewall as DROPPED
# host hinet.net
hinet.net mail is handled by 10 netnews.hinet.net.
or
# dig hinit.net
hinet.net. 10800 IN SOA hntp1.hinet.net.
hostmaster.hinet.net. 200605221 21600 7200 3600000 86400
# host netnews.hinet.net
netnews.hinet.net has address 168.95.195.16
# host hntp1.hinet.net
hntp1.hinet.net has address 168.95.192.1
I think, block this list IP using firewall.
In the rules of your firewall, add this :
DROPPED net:168.95.195.16,168.95.192.1, etc
or
DROPPED net:168.95.0.0/netmask ( i dont know this)
then restart your firewall.
2) Adding SPAM domain in Qtrap as BANNED WORDS
checkall () {
case $BANNED_WORDS in
*hinet\.net*|PornContain|SexualContain*\*\*\*SPAM\*\*\**|etc...)
see documentations at http://www.qmailrocks/qtrap.php
3) Learning SPAM with spamassassin using mailbox who emailed by this domain.
Expl.
User [EMAIL PROTECTED] recieved email by domain hinet.net, this mail
entering in Maildir/new
do this :
#sa-learn --spam
/home/vpopmail/domains/yourdomain.com/guest/Maildir/new/xxxx-contain-email-from-domain-hinet.net-xxx
4) Quick do it!!!
may be helping you.
2006/5/23, Diego Pivetta <[EMAIL PROTECTED]>:
Olá amigo
I solved this the hinet.net spam
I add on file: /var/qmail/control/badmailfrom
I add this:
@*.hinet.net
It´s refuse hinet mail´s on connect , not delivery to qmail queue.
=P
----- Original Message -----
From: "Aleksandar Nikolovski" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Monday, May 22, 2006 2:34 PM
Subject: [qmailtoaster] relay/spam attack
My qmailtoaster box was attack from hinet.net sites with a lot
messages for a few moments and my mail server crash down.
My box working with no problems for 5 months that is CentOS installation.
I have only 2 vpopdomains with 20 mail accounts each.
I saw at list that by default qmailtoaster accept relay only with smtp
auth and I no touching anything at qmail control or tcp.smtp. But huge
number of massages arrive at my box and block my server.
Maybe I must do additionally setting for relaying or cut time for
unauthorized relayers to keep at my server
So pls anybody help
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
--
Internal Virus Database is out-of-date.
Checked by AVG Free Edition.
Version: 7.1.392 / Virus Database: 268.5.5/335 - Release Date: 9/5/2006
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
