Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.os.linux.networking > #2003

Re: Dropping connection attempts to port 25

From Dale Dellutri <ddelQQQlutr@panQQQix.com>
Newsgroups comp.os.linux.networking
Subject Re: Dropping connection attempts to port 25
Date 2013-03-11 14:58 +0000
Organization PANIX Public Access Internet and UNIX, NYC
Message-ID <khkreb$7qb$1@reader2.panix.com> (permalink)
References <khkqrs$msg$1@news.albasani.net>

Show all headers | View raw


On Mon, 11 Mar 2013 10:48:29, Clark Smith <noaddress@nowhere.net> wrote:
>         Somebody keeps trying to connect to my sendmail server, without 
> success, but filling my logs in the process. Since, according to the 
> sendmail logs, the connection seems to be coming from a specific IP 
> address <ip>, I added the following IPTables rules:

>         iptables -A INPUT -s <ip> -j DROP
>         iptables -A OUTPUT -d <ip> -j DROP

> However, I can still see further connection attempts in the sendmail logs.

>         Any ideas on how to get IPTables to drop such attempts before 
> they get to sendmail?

Where in the INPUT chain was the first rule added?  Was it after
a rule which accepts port 25 attempts?

Remember that rules are done in order.

To get the order of the rules:
  # iptables -nvL

-- 
Dale Dellutri <ddelQQQlutr@panQQQix.com> (lose the Q's)

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Dropping connection attempts to port 25 Clark Smith <noaddress@nowhere.net> - 2013-03-11 14:48 +0000
  Re: Dropping connection attempts to port 25 Richard Kettlewell <rjk@greenend.org.uk> - 2013-03-11 14:58 +0000
    Re: Dropping connection attempts to port 25 Clark Smith <noaddress@nowhere.net> - 2013-03-11 15:12 +0000
      Re: Dropping connection attempts to port 25 Richard Kettlewell <rjk@greenend.org.uk> - 2013-03-11 16:24 +0000
      Re: Dropping connection attempts to port 25 Octothorpe <Octothorpe@invalid.com> - 2013-03-11 16:38 -0400
        Re: Dropping connection attempts to port 25 Richard Kettlewell <rjk@greenend.org.uk> - 2013-03-12 10:16 +0000
  Re: Dropping connection attempts to port 25 Dale Dellutri <ddelQQQlutr@panQQQix.com> - 2013-03-11 14:58 +0000
    Re: Dropping connection attempts to port 25 Clark Smith <noaddress@nowhere.net> - 2013-03-11 15:15 +0000
  Re: Dropping connection attempts to port 25 David Hough <noone$$@llondel.org> - 2013-03-12 07:29 +0000
  Re: Dropping connection attempts to port 25 Joe Beanfish <joebeanfish@nospam.duh> - 2013-03-12 13:21 +0000

csiph-web