How to Block one incoming IP

I have one IP address that is trying to send excessive mail to my smtp
server. I get about 5 requests per second, and even though it denys the
mail from sending, it lags the smtp engine.

This specific IP has been 'attacking' for over a week, so I need to start
looking into blocking methods.

Since the machine isn't part of a domain, I'm not real confident with the
IP Security Policies working.

Any help would be appreciated.

Thanks,
Rocky

Since your server is not part of a domain, I assume this is web server
hosting SMTP, it sounds like you have the SMTP filter set correctly on your
server, so:

if the source address is on the other side of a firewall, then deny smtp
traffic (port 25) at the firewall from the source address to your server,
this should keep the traffic from reaching your mail server.

if the source address is inside a firewall, trace the connection and
disconnect the host.


"Rocky" wrote:

> I have one IP address that is trying to send excessive mail to my smtp
> server. I get about 5 requests per second, and even though it denys the
> mail from sending, it lags the smtp engine.
>
> This specific IP has been 'attacking' for over a week, so I need to start
> looking into blocking methods.
>
> Since the machine isn't part of a domain, I'm not real confident with the
> IP Security Policies working.
>
> Any help would be appreciated.
>
> Thanks,
> Rocky
>

"=?Utf-8?B?Y2hhZHdpYw==?=" <(E-Mail Removed)> wrote in
news:A5B3E461-584D-4E25-BFA7-(E-Mail Removed):

> if the source address is inside a firewall, trace the connection and
> disconnect the host.

How does one trace a connection and disconnect the host?

Thanks,
Rocky