hi guys,

I know that an ip x.x.x.x continue to send me virus mail and unwanted things. How can i block the ip?


I have APF running on my server and i can blok the IP there. I am confused that" when you add an ip to firewall deny rules,mail from that IP is accepted or rejected?"

If i add an IP to /etc/hosts.deny, wthem y server accept mail from the IP or not?

Are you running your own mail server?
You could drop all connections from that IP, but the email may be taking a circuitous route and blocking the email address or IP traffic from that server may not prevent that email. However, if that email server is an open relay, blocking it may be a good idea anyway. My main point is that the actual connection to your machine may not be the source of the traffic.

Look at the header of the email. It is common for the earliest email address to be added before the message is first sent, so you might want to block the 2nd entry, especially if it looks like a normal host and not a commercial mail server.

More information on your setup may help determine the best way to block the emails.

yes , i found out the way

i edited /etc/mail/access

x.x.x.x REJECT
xxxx.com REJECT

and this did the trick.

and thank you for your suggestions.