----- Original Message ----- | What would be the best method for (temporarily) blocking all mail from a | particular (internal) IP? Or alternatively, blocking all mail with a | particular “MAIL FROM” address?
| For instance, blocking all mail from 1.2.3.4, or alternatively, from | bro...@badhost.example.com . | The purpose would be if some departmental server has a runaway process that | is spewing out error messages on the weekend and there is a delay in | contacting the sysadmin to shut it down. | Thanks, | Larry M. Rosenbaum | Oak Ridge National Laboratory Have you looked at fail2ban? It parses the logs in near real-time and then updates iptables with temporary IP blocks. There are filters for many different services: email, ssh, web etc. http://www.fail2ban.org/wiki/index.php/Main_Page ___________________________________________________________________ A Message From ... L. Mark Stone - General Manager, Managed and Private/Hybrid Cloud Services "Uptime. All the time." ® www.reliablenetworks.com Eleven Years In Business 2003 - 2014 477 Congress Street, Suite 812 | Portland, ME 04101 | (207) 772-5678 private/hybrid cloud hosting | Zimbra groupware | managed services proactive maintenance and monitoring | technology consulting Maine's only managed services and cloud hosting provider with a SOC 2 Type II audit covering Security, Availability an d Confidentiality Find me on: Facebook | LinkedIn | Twitter This email may contain information that is privileged and confidential. If you suspect that you were not intended to receive it, please delete it and notify us as soon as possible. Thank you.
