One thought on “Spam bot / Bot Net? – [email protected]

  1. This particular scanner always greet with “EHLO 192.168.2.33”. Use these rules to stop them:

    iptables -t raw -A PREROUTING -i eth+ -p tcp –dport 25 -m string –string “192.168.2.33” –algo bm -m recent –set –name SBOT

    iptables -I INPUT -i eth+ -p tcp –dports 25 -m recent –rcheck –name SBOT -j REJECT –reject-with tcp-reset

Leave a Reply