Fight Spam

[dannygoh]

there is a user using a free email account to try to send to every possible users on one of my domain user. should i reported to email account provider or the isp

2004-09-16 09:58:23 H=(ambleaction.com.my) [202.188.67.183] F=<[email protected]> rejected RCPT <[email protected]>: authentication required
2004-09-16 09:58:24 unexpected disconnection while reading SMTP command from (ambleaction.com.my) [202.188.67.183]
2004-09-16 09:59:00 H=(ambleaction.com.my) [202.188.67.183] F=<[email protected]> rejected RCPT <[email protected]>: authentication required
2004-09-16 09:59:03 unexpected disconnection while reading SMTP command from (ambleaction.com.my) [202.188.67.183]
2004-09-16 09:59:59 H=(ambleaction.com.my) [202.188.67.183] F=<[email protected]> rejected RCPT <[email protected]>: authentication required
2004-09-16 09:59:59 unexpected disconnection while reading SMTP command from (ambleaction.com.my) [202.188.67.183]
2004-09-16 10:00:05 H=(ambleaction.com.my) [202.188.67.183] F=<[email protected]> rejected RCPT <[email protected]>: authentication required
2004-09-16 10:00:11 unexpected disconnection while reading SMTP command from (ambleaction.com.my) [202.188.67.183]
2004-09-16 10:02:05 H=(ambleaction.com.my) [202.188.67.183] F=<[email protected]> rejected RCPT <[email protected]>: authentication required
2004-09-16 10:02:06 unexpected disconnection while reading SMTP command from (ambleaction.com.my) [202.188.67.183]

 

[motobrandt]

#route add 202.188.67.183 127.0.0.1

This basically sends requests from this IP to a blackhole. I'm not sure what the drawbacks would be from doing this. Maybe someone will chirp in with insight. I know that some people don't like this but I haven't heard why.

But it does work. And it does stop them from filling your logs.