Koozali.org: home of the SME Server

Legacy Forums => General Discussion (Legacy) => Topic started by: Black on June 23, 2005, 04:29:00 PM

Title: Getting Spam, Need help blocking IP's
Post by: Black on June 23, 2005, 04:29:00 PM

Hello all, I am getting spam from 2 servers across the world sending me email that looks like it's coming from myself or someone on my site when in reality it's from the spammers.

I get about 10-15 a day each with shit like , admin@mysite.com, support, etc...

How do I block an IPADDRESS?

I have spamassisan but it's not stopping these.

thanks

Title: Re: Getting Spam, Need help blocking IP's
Post by: raem on June 24, 2005, 02:58:50 AM

Black

> ...I am getting spam from 2 servers across the world

Do you have RBL lists enabled ?

Title: Getting Spam, Need help blocking IP's
Post by: Black on June 24, 2005, 03:14:45 AM

No I only have IP Adresses for them. I cannot find any domain assoiated with them.

Title: Re: Getting Spam, Need help blocking IP's
Post by: raem on June 24, 2005, 03:25:21 AM

Black

> ...I am getting spam from 2 servers across the world

> Do you have RBL lists enabled ?

I'm talking about RBL blocking of messages from known spam sources. You can configure that manually with my HOWTO
http://mirror.contribs.org/smeserver/contribs/rmitchell/smeserver/howto/Spam%20blocking%20HOWTO%20using%20smtpfront-qmail%20for%20sme%20server.htm

or if you have Jespers Spam Filter panel installed then you can select and enable lists using the server manager panel.

Selecting 2 or 3 or 4 lists will block most spamming sources without needing to specifiy their IP or source address. lookups of the external lists (RBL lists ) take care of that for you.

I was just wondering if you had RBL enabled.

If you did not, then trying that may stop those spam sources without much further effort needed.

So do you have RBL enabled ???

Title: Getting Spam, Need help blocking IP's
Post by: Black on June 24, 2005, 03:36:57 AM

No I did not.. I just Addes 5 from the list of 10 or so..

like I said man it'sreally fucking hard to figure out what to do for me sometimes...let's see what happens with this..

what about my original Idea of simply blocking the IP? It's the same one all the time..

Title: Getting Spam, Need help blocking IP's
Post by: pfloor on June 24, 2005, 04:36:46 AM

Quote from: "Black"

No I did not.. I just Addes 5 from the list of 10 or so..

what about my original Idea of simply blocking the IP? It's the same one all the time..

I implemented the RBL blocking about a month ago and it stopped everything.

A few days ago it started again with a new IP address.  Then as quickly as it started, it stopped and all is quiet again.  It appears that it takes a day or 2 for new IP's to be added to the RBL's.

Paul

Title: Getting Spam, Need help blocking IP's
Post by: Black on June 24, 2005, 04:41:39 PM

Interesting, It actually worked. :)

Title: Getting Spam, Need help blocking IP's
Post by: raem on June 24, 2005, 05:09:14 PM

Black

>...Interesting, It actually worked.

and so it should !

RBL blocking has been used by many sme users since early 2004 and it has proven very effective at reducing spam as well as virus infected messages (come from same sources)

Title: Getting Spam, Need help blocking IP's
Post by: kruhm on June 26, 2005, 02:14:32 PM

if you are set on blocking the IP address:
http://forums.contribs.org/index.php?topic=27546.msg114116#msg114116