or to just block SMTP ipchains -A input -i eth0 --source creep.ip.ad.dy 25 -j DENY And let him utilize the rest of the services
Hi Gerald,I do that some of the time (like just for persistant spamograms) but if I suspect that someone might try elsewhere, I figure they don't need *any* access to the server. Usually when I put in an overall ban, I add the -l and watch to see if they ever really did try to connect to anything other than that port. Only about one ever did access or try to access 80.
Better safe and one ip address less visitors than sorry ;-) WS _________________________________________________________________ Send and receive Hotmail on your mobile device: http://mobile.msn.com