Date: Sun, 18 Mar 2001 16:00:19 -0700 From: Brett Glass <brett@lariat.org> To: marouni@earlham.edu, "security FreeBSD.ORG" <security@FreeBSD.ORG> Subject: Re: Blocking an IP addrress Message-ID: <4.3.2.7.2.20010318155909.00e21530@localhost> In-Reply-To: <3AB52B88.A09A4003@earlham.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
Why not add a blackhole host route to that IP? --Brett At 02:41 PM 3/18/2001, Nicholas Marouf wrote: >Greetings, > We've been getting many sendmail connections from 199.45.164.216 and >is causing sendmail to stop. This looks like a DOS however the admin of >that server says that sendmail on their side is sending mail out in >bacthes, and that they are taking a look into it. > >But either way we would like to block it. > >I've added deny all in hosts.allow for that ip >Also added in the access file REJECT for that ip address. > >Those two still do not make a difference since connections keep on >opening up. > >I've been trying to get ipfw to block it. but I get this error message. >Any advice would be much appreciated. > >su-2.04# ps ax | grep sendmail >16180 ?? Ss 0:00.02 sendmail: accepting connections (sendmail) >16250 ?? S 0:00.03 sendmail: startup with 199.45.164.216 >(sendmail) >16337 ?? I 0:00.00 sendmail: startup with 199.45.164.216 >(sendmail) >16344 p2 R+ 0:00.00 grep sendmail > > >Thanks again.. > >Nick > > >-- >Nicholas Marouf || Student System Administrator >http://www.ramallahonline.com > > > > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-security" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4.3.2.7.2.20010318155909.00e21530>