Block attack from ylmf-pc
- 2018/03/10
- Category: Internet
Block attack from ylmf-pc
When your smtp server getting attacked by a host called ylmf-pc, the easiest way to solve this is to add a iptables rule that looks like this:
iptables -I INPUT -p tcp --dport 25 -m string --algo bm --string 'ylmf-pc' -j LOG --log-prefix "Firewalled packet: ylmf-pc " iptables -I INPUT -p tcp --dport 25 -m string --algo bm --string 'ylmf-pc' -j DROP