Spam attacks

Mar 19 04 8:52 am

Any suggestions on how to block specific IPs? My SMTP server is being attacted by spammers. I'm getting hundreds of emails an hour from hinet.net and others where I'm not the recpient. It's like I'm being used as a relay even though I'm using the anti-relay protection feature and ordb.org filter.

A typical header:

Received: From edm100 (unverified [61.230.110.123]) by SMTP Server [192.168.1.20]
(WinGate SMTP Receiver v5.0.4) with SMTP id <0000165675@jparchitects.com>;
Thu, 18 Mar 2004 13:50:56 -0500
From: <guajxjvzq@ms3.hinet.net>
To: <auki@ms43.hinet.net>
Subject:xozc §Aªº·s¿ï¾Ü-¥~ÄyÀ°¶Ä fdnr
MIME-Version: 1.0
X-MSMail-Priority: Normal
X-Mailer: tieccpbmjgmtjmiwzjzfwbcbnfhx
Content-Type: text/html; charset="big5"

Any suggestions?

Hugh

Mar 24 04 9:58 am

Hi Bosely

If you are using the latest version of WinGate you can use the IP blackhole option (Tab) which can be found in the ENS configuration to list IP's which WinGate will ignore.

If you see the SPAM activity happening live in the Activity Screen in GateKeeper you can blackhole the IP by right clicking on the IP and selecting "Blackhole IP".

Hope this helps

Regards
Erwin