On 25/05/10, David Baron (d_baron@012.net.il) wrote: | > > I get a zillion of these, every single day, about every 5 minutes or so: | > > | > > | > > 2010-05-24 15:05:38 SMTP call from localhost (dovidhalevi) [127.0.0.1] | > > dropped: too many syntax or protocol errors (last command was "MAIL | > > FROM:<jameswellington000.org@[71.121.223.194]> SIZE=8814") | > | > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ | > | > > I am running exim4 heavy on a Sid box. | > > | > > | > > | > > Exim shows no stuck messages or such. How can I stop this? | > | > It is a spamer... | > | > It it is always the same IP, add it to the backlist | | How do I do this obvious task? In exim? I have fail2ban as well but this is | not catching this one. Have you tried adding /sbin/iptables -I INPUT -s 71.121.223.194 -j DROP to /etc/init.d/iptables.rules? -- JohnRChamplin@columbus.rr.com ==================================================== GPG key 1024D/99421A63 2005-01-05 EE51 79E9 F244 D734 A012 1CEC 7813 9FE9 9942 1A63 gpg --keyserver subkeys.pgp.net --recv-keys 99421A63
Attachment:
signature.asc
Description: Digital signature