Topic: Getting Spam, Need help blocking IP's

[Black]

Hello all, I am getting spam from 2 servers across the world sending me email that looks like it's coming from myself or someone on my site when in reality it's from the spammers.

I get about 10-15 a day each with shit like , admin@mysite.com, support, etc...

How do I block an IPADDRESS?

I have spamassisan but it's not stopping these.

thanks

[raem]

Black

> ...I am getting spam from 2 servers across the world

Do you have RBL lists enabled ?

[Black]

No I only have IP Adresses for them. I cannot find any domain assoiated with them.

[raem]

Black

> ...I am getting spam from 2 servers across the world

> Do you have RBL lists enabled ?

I'm talking about RBL blocking of messages from known spam sources. You can configure that manually with my HOWTO
http://mirror.contribs.org/smeserver/contribs/rmitchell/smeserver/howto/Spam%20blocking%20HOWTO%20using%20smtpfront-qmail%20for%20sme%20server.htm

or if you have Jespers Spam Filter panel installed then you can select and enable lists using the server manager panel.

Selecting 2 or 3 or 4 lists will block most spamming sources without needing to specifiy their IP or source address. lookups of the external lists (RBL lists ) take care of that for you.

I was just wondering if you had RBL enabled.

If you did not, then trying that may stop those spam sources without much further effort needed.

So do you have RBL enabled ???

[Black]

No I did not.. I just Addes 5 from the list of 10 or so..

like I said man it'sreally fucking hard to figure out what to do for me sometimes...let's see what happens with this..

what about my original Idea of simply blocking the IP? It's the same one all the time..

[pfloor]

No I did not.. I just Addes 5 from the list of 10 or so..

what about my original Idea of simply blocking the IP? It's the same one all the time..

I implemented the RBL blocking about a month ago and it stopped everything.

A few days ago it started again with a new IP address.  Then as quickly as it started, it stopped and all is quiet again.  It appears that it takes a day or 2 for new IP's to be added to the RBL's.

Paul

[Black]

Interesting, It actually worked.

[raem]

Black

>...Interesting, It actually worked.

and so it should !

RBL blocking has been used by many sme users since early 2004 and it has proven very effective at reducing spam as well as virus infected messages (come from same sources)

[kruhm]

if you are set on blocking the IP address:
http://forums.contribs.org/index.php?topic=27546.msg114116#msg114116