Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.os.linux.networking > #2003

Re: Dropping connection attempts to port 25

Path csiph.com!newsfeed.hal-mli.net!feeder3.hal-mli.net!newsfeed.hal-mli.net!feeder1.hal-mli.net!news.linkpendium.com!news.linkpendium.com!panix!not-for-mail
From Dale Dellutri <ddelQQQlutr@panQQQix.com>
Newsgroups comp.os.linux.networking
Subject Re: Dropping connection attempts to port 25
Date Mon, 11 Mar 2013 14:58:19 +0000 (UTC)
Organization PANIX Public Access Internet and UNIX, NYC
Lines 24
Message-ID <khkreb$7qb$1@reader2.panix.com> (permalink)
References <khkqrs$msg$1@news.albasani.net>
NNTP-Posting-Host panix1.panix.com
X-Trace reader2.panix.com 1363013899 8011 166.84.1.1 (11 Mar 2013 14:58:19 GMT)
X-Complaints-To abuse@panix.com
NNTP-Posting-Date Mon, 11 Mar 2013 14:58:19 +0000 (UTC)
User-Agent tin/2.0.0-20110823 ("Ardenistiel") (UNIX) (NetBSD/5.1.2 (i386))
Xref csiph.com comp.os.linux.networking:2003

Show key headers only | View raw


On Mon, 11 Mar 2013 10:48:29, Clark Smith <noaddress@nowhere.net> wrote:
>         Somebody keeps trying to connect to my sendmail server, without 
> success, but filling my logs in the process. Since, according to the 
> sendmail logs, the connection seems to be coming from a specific IP 
> address <ip>, I added the following IPTables rules:

>         iptables -A INPUT -s <ip> -j DROP
>         iptables -A OUTPUT -d <ip> -j DROP

> However, I can still see further connection attempts in the sendmail logs.

>         Any ideas on how to get IPTables to drop such attempts before 
> they get to sendmail?

Where in the INPUT chain was the first rule added?  Was it after
a rule which accepts port 25 attempts?

Remember that rules are done in order.

To get the order of the rules:
  # iptables -nvL

-- 
Dale Dellutri <ddelQQQlutr@panQQQix.com> (lose the Q's)

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Dropping connection attempts to port 25 Clark Smith <noaddress@nowhere.net> - 2013-03-11 14:48 +0000
  Re: Dropping connection attempts to port 25 Richard Kettlewell <rjk@greenend.org.uk> - 2013-03-11 14:58 +0000
    Re: Dropping connection attempts to port 25 Clark Smith <noaddress@nowhere.net> - 2013-03-11 15:12 +0000
      Re: Dropping connection attempts to port 25 Richard Kettlewell <rjk@greenend.org.uk> - 2013-03-11 16:24 +0000
      Re: Dropping connection attempts to port 25 Octothorpe <Octothorpe@invalid.com> - 2013-03-11 16:38 -0400
        Re: Dropping connection attempts to port 25 Richard Kettlewell <rjk@greenend.org.uk> - 2013-03-12 10:16 +0000
  Re: Dropping connection attempts to port 25 Dale Dellutri <ddelQQQlutr@panQQQix.com> - 2013-03-11 14:58 +0000
    Re: Dropping connection attempts to port 25 Clark Smith <noaddress@nowhere.net> - 2013-03-11 15:15 +0000
  Re: Dropping connection attempts to port 25 David Hough <noone$$@llondel.org> - 2013-03-12 07:29 +0000
  Re: Dropping connection attempts to port 25 Joe Beanfish <joebeanfish@nospam.duh> - 2013-03-12 13:21 +0000

csiph-web