On Monday 24 February 2003 08:14, hare ram wrote: > Hi all > > I have One Public IP assigned to eth0 > i have Private network 192.168.1.0/24 connected to eth1 > > how can stop, some one spamming from internal IP > i get from lot queries from other host saying that > my Public IP is spamming ..... > > 1 ) how do i stop them spaming or relaying mails from internal PC > 2) how to stop scanning from internal ip to any external IP > 3) how do i kick the user who is infected with the virus and block them and > notify to admin > > thanks > hare You can start out logging forwarding port 25, the host that connects to many different mailhosts is the one causing the spam. (BTW, don't you have a mailserver running yourself? If so, check it's logs.) When you find the offending host, you should cut it off from your network (by blocking it's MAC address). No warnings, no excuses. Spamming is IMO one of the worst breaches of the nettiquette. HTH, Willem
