Re: [cobalt-users] hosts.deny question

["Tarun Dua" <tarundua@xxxxxxxxxxxx>]

If you use ipchains then you can block the IP at the level of TCP
implentation level instead of the current application level using host.deny.
That will conserve your system resources.
Regards

--
Tarun Dua
Sr. Exec. System Administrator
------------------------------------------------
Pugmarks InterWeb Pvt. Ltd. INDIA Tel: (172) 622-753, 54, 55 Fax: 91 (172)
645-906
Pugmarks Inc. USA Tel: (630) 571-0699, Fax: (630) 571-0642
http://www.pugmarks.net
Subject: RE: [cobalt-users] hosts.deny question


> >
> > On Fri, 2 Aug 2002, Bob G7 wrote:
> >
> > > I keep getting a bunch of emails from a spammer on one of my RaQ4
email
> > > accounts.
> > >
> > > I added this to my hosts.deny:
> > >
> > > in proftpd : .optinllc.com
> > >
> > > Should I have put this somewhere else instead?
> >
> > Unless you thought he was going to upload files or something
> > that's not going to help much...
> >
> > look in the email paramaters section in the control panel for a place
> > to add domains to refuse email from
> >
> > IP works better btw, eg 64.251.20.
> >
> >
> > > But when you hit the link, it's dead.
> >
> > Of course not, if you unsubscribe, they will have to scrape your email
> > address again ;P
> >
> > > I tried adding a rule to outlook, but they keep changing the
> > prefix name so
> > > the rule wont catch it.
> >
> > That's why blocking by domain name doesn't work all that well, use IP
> > addresses, then it doesn't matter what they call the server...
> >
> > If you want to do it manually, you can edit /etc/mail/access
> >
> > 64.251.20.<tab>550 Refused - spam
> >
> > (Anything you want after, the number, but it helps if it makes sense to
> > the person reading it just in case)
> >
> > You may want to list more, many of us believe infolink is hosting
spammers
> > on purpose ;P
> >
> Thanks, I added that. In the time I posted this message and you replied, I
> had gotten at least 2 dozen additional spams all from the same ip address.
> So far no more have arrived in the last 10 minutes, but I'll keep an eye
on
> it and the log's also, see if they show up there.
>
> Again thanks for you help.
>
> _____________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users