assp stop spam

assp stop spam

Postby stephen » Fri Mar 06, 2009 4:42 pm

my ASSP maillog tail was showing
Mar-6-09 04:23:26 83.228.5.115 <gsrnmf@quiubi.it> to: zolliniventura@tiscali.it whitelist addition:
zombin@libero.it
Mar-6-09 04:23:26 83.228.5.115 <gsrnmf@quiubi.it> to: zolliniventura@tiscali.it whitelist addition:
zonin@zonin.it
Mar-6-09 04:23:26 [Local] 83.228.5.115 <gsrnmf@quiubi.it> to: zolliniventura@tiscali.it
local


The spamhaus RBL says
nnn.nnn.nnn.nnn/32 is listed on the Spamhaus Block List (SBL)

05-Mar-2009 14:15 GMT | SR08

phish source at xxxxx.com.au

Server emitting large amounts of phish spam.
Likely SMTP AUTH abuse through a weak password.


The first thing I have done is modify the assp.cfg file to try and block this ip address 83.228.5.115

Code: Select all
DoDenySMTP: block
denySMTPConnectionsFrom:  83.228.5.115
DoDenySMTPstrict: block
denySMTPConnectionsFromAlways: 83.228.5.115
stephen
 
Posts: 507
Joined: Thu Feb 09, 2006 9:37 am
Location: Brisbane

Return to Linux Server Configuration Notes

Who is online

Users browsing this forum: No registered users and 2 guests

cron