OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Infected pc

From: Anton Herber (anton.herberincom.de)
Date: Tue Mar 25 2008 - 03:41:57 CDT


I would simply use

iptables -I INPUT -p tcp -s xxx.xxx.xxx.xxx --dport 25 -j REJECT
--reject-with-tcp-reset

It should be a temp. solution anyway. In this case quick and dirty
should be fine IMHO. :-)

-------- Original Message --------
Subject: Infected pc
From: Antonio Tommasi <antonio.tommasiunile.it>
To: postfix-userspostfix.org
Date: Tue Mar 25 2008 09:29:58 GMT+0100
> Hi to all,
> is there a way to delete all mail that become from a specific client?
> If an internal pc is infected by a virus and send spam by my smtp
> server, it is necessary, when identified, to delete only email from
> that ip in my queue.
> Is there a way?
> Thanks in advance
> Antonio