Re: How to stop SPAM from Internal users

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, 24 Feb 2003, hare ram wrote:

> I have One Public IP assigned to eth0
> i have Private network 192.168.1.0/24 connected to eth1
>
> how can stop, some one spamming from internal IP
> i get from lot queries from other host saying that
> my Public IP is spamming .....
>
> 1 ) how do i stop them spaming or relaying mails from internal PC

Setup a local SMTP server. Block port 25 from any host except the mail
server. Thus your local users will need to use your local server.

> 2) how to stop scanning from internal ip to any external IP

You can't unless you want to block internet access entirely. You can
however limit the speed with the 'limit' module - effectively making
scanning impossible.

> 3) how do i kick the user who is infected with the virus and block them and
> notify to admin

You have to know what IP, they're on and then block all traffic from
that host - and make sure they do not change IP.

/Rasmus

-- 
-- [ Rasmus "Møffe" Bøg Hansen ] ---------------------------------------
"Nothing would please me more than being able to hire ten programmers
and deluge the hobby market with good software."
                                                   -- Bill Gates 1976
We are still waiting ....
----------------------------------[ moffe at amagerkollegiet dot dk ] --




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux