[cobalt-security] Re: That infected message was not from me...

[Bruce Timberlake <bruce@xxxxxxxxxx>]

> > > It was in fact from this computer:
> > >
> > > Received: from computer.com (d60-65-133-254.clv.wideopenwest.com
> > > [65.60.254.133])
> > > by list.cobalt.com (8.9.3/8.9.3) with SMTP id NAA15501
> > >
> > > which has no relationship with my business.
> >
> > The wideopen part in the senders name seems self-fullfilling :)
>
> Really bad ISP with lots of spammers!

iptables -A INPUT -s 65.60.128.0/17 \
   -p tcp --dport 25 -i eth0 -j DROP

or

ipchains -A input -s 65.60.128.0/17 \
   -p tcp 25 -i eth0 -j DENY

or (in /etc/mail/access)

wideopenwest.com	550 your reject message here

:)