From time to time I get many megabytes of entries like this in my SIMS log:

00:27:19 1 SMTP-365([200.204.198.115]) SPAM? Recipient '<[EMAIL PROTECTED]>' rejected: sending host is blacklisted, "The host is suspected in address harvesting"
00:27:19 1 SMTP-365([200.204.198.115]) SPAM? Recipient '<[EMAIL PROTECTED]>' rejected: sending host is blacklisted, "The host is suspected in address harvesting"
00:27:20 1 SMTP-365([200.204.198.115]) SPAM? Recipient '<[EMAIL PROTECTED]>' rejected: sending host is blacklisted, "The host is suspected in address harvesting"
00:27:20 1 SMTP-365([200.204.198.115]) SPAM? Recipient '<[EMAIL PROTECTED]>' rejected: sending host is blacklisted, "The host is suspected in address harvesting"
00:27:20 1 SMTP-365([200.204.198.115]) SPAM? Recipient '<[EMAIL PROTECTED]>' rejected: sending host is blacklisted, "The host is suspected in address harvesting"
00:27:21 1 SMTP-365([200.204.198.115]) SPAM? Recipient '<[EMAIL PROTECTED]>' rejected: sending host is blacklisted, "The host is suspected in address harvesting"
00:27:21 1 SMTP-365([200.204.198.115]) SPAM? Recipient '<[EMAIL PROTECTED]>' rejected: sending host is blacklisted, "The host is suspected in address harvesting"
00:27:21 1 SMTP-365([200.204.198.115]) SPAM? Recipient '<[EMAIL PROTECTED]>' rejected: sending host is blacklisted, "The host is suspected in address harvesting"
00:27:22 1 SMTP-365([200.204.198.115]) SPAM? Recipient '<[EMAIL PROTECTED]>' rejected: sending host is blacklisted, "The host is suspected in address harvesting"
00:27:22 1 SMTP-365([200.204.198.115]) SPAM? Recipient '<[EMAIL PROTECTED]>' rejected: sending host is blacklisted, "The host is suspected in address harvesting"
00:27:23 1 SMTP-365([200.204.198.115]) SPAM? Recipient '<[EMAIL PROTECTED]>' rejected: sending host is blacklisted, "The host is suspected in address harvesting"
00:27:23 1 SMTP-365([200.204.198.115]) SPAM? Recipient '<[EMAIL PROTECTED]>' rejected: sending host is blacklisted, "The host is suspected in address harvesting"
00:27:24 1 SMTP-365([200.204.198.115]) SPAM? Recipient '<[EMAIL PROTECTED]>' rejected: sending host is blacklisted, "The host is suspected in address harvesting"


Basically someone has a broken program that tries to send to the same failed account several times a second for many hours.

At present I am using an older LinkSys NAT box for my "firewall". Ports for POP and SNMP are forwarded to my SIMS box. The current firmware in the LinkSys, and as far as I can tell, the newest firmware available for this model do not allow blocking of specific incoming IP addresses or ranges of addresses.

I'd like an inexpensive hardware router/firewall/NAT box that would allow me to block things like this before it ever gets to SIMS. I much prefer to have my firewall be something other than my server(s). And I'd much prefer to have a device with no moving parts that generates little heat and uses little power, so I'd rather not press an old computer into service for this.

Any suggestions?

Thanks
Tod


############################################################# This message is sent to you because you are subscribed to the mailing list <[EMAIL PROTECTED]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>



Reply via email to