On Mon, 24 Feb 2003, hare ram wrote: > I have One Public IP assigned to eth0 > i have Private network 192.168.1.0/24 connected to eth1 > > how can stop, some one spamming from internal IP > i get from lot queries from other host saying that > my Public IP is spamming ..... > > 1 ) how do i stop them spaming or relaying mails from internal PC Setup a local SMTP server. Block port 25 from any host except the mail server. Thus your local users will need to use your local server. > 2) how to stop scanning from internal ip to any external IP You can't unless you want to block internet access entirely. You can however limit the speed with the 'limit' module - effectively making scanning impossible. > 3) how do i kick the user who is infected with the virus and block them and > notify to admin You have to know what IP, they're on and then block all traffic from that host - and make sure they do not change IP. /Rasmus -- -- [ Rasmus "Møffe" Bøg Hansen ] --------------------------------------- "Nothing would please me more than being able to hire ten programmers and deluge the hobby market with good software." -- Bill Gates 1976 We are still waiting .... ----------------------------------[ moffe at amagerkollegiet dot dk ] --