Better yet, block all outbound SMTP traffic that is not going to your
mail server or your ISP's mail server. This will mitigate this issue
now, and future issues of the same nature.
Then to FIX the problem, format that Windows machine, start with a fresh
install, patch, patch, patch, patch and do not use Outlook or IE on it -
And finally delete the "Allow all from LAN" rule and follow the
instructions in my previous post to create a more secure network
waa dash m0n0 at revpol dot com
Ulrik Lunddahl (PROconsult) wrote:
> Hi Marc!
> Make a rule on the interface the spamming computer is connected to, most
> often this is the LAN interface, the rule should block all trafic with a
> destination address of 188.8.131.52
> - Ulrik Lunddahl
> -----Oprindelig meddelelse-----
> Fra: Marc Janssens [mailto:marc dot janssens at hotmail dot com]
> Sendt: 4. april 2007 12:40
> Til: lagreca at gmail dot com; phil at brutsche dot us
> Cc: m0n0wall at lists dot m0n0 dot ch
> Emne: [m0n0wall] BLOCK IP SPAM
> I have a spam in one of the machine in my network.
> This spam is trying to reach every 4 seconds the following IP :
> I would like to know If i can block this IP in monowall ??
> Thanks a lot