Try #iptables -I INPUT 1 -s 202.145.10.146 -j DROP It will insert the rule on the top of the ruleset, so it matches first. Regards, Victor On Thursday 29 July 2004 14:14, david wrote: > Dear all, > > My mail server received so many virus mails from ip 202.145.10.147 and > after i look at gateway (linux) and i using iptraf i see so many traffic > from 202.145.10.147. > After that i try to block all traffic from 202.145.10.147 with command : > #iptables -A INPUT -s 202.145.10.146 -j DROP > > but i still receiveall traffic from 202.145.10.146...... > Can anybody help me ........... that ip send virus in to mail server more > then 20 mails per minute....... > > > Regards, > David Kandou > > Help me ... iam so confused > > FYI : > Iam using RedHat 9 > eth0 --> ippublic > eth1 --> local ip > mail server --> local ip