Quoting Stan Hoeppner <s...@hardwarefreak.com>:
vtzan put forth on 12/11/2009 5:26 AM:
Hello all,
I need to reject smtp connection from certain ip inside my network
(SPAMMER).
If this is the case, it may be more effective and expedient to drop
_all_ his traffic inbound to your Postfix host.
iptables -I INPUT -s xxx.xxx.xxx.xxx -j DROP
That works for Linux, not sure about *BSD.
This is what I would do if someone in my network was spamming. Cut him
off at the knees, and prevent him from attacking your system's other
service ports.
Well, why not just drop that user out of network due to tos
violations? He might also abuse other services too?
--
Eero