Hi-
I posted this in Email support before, no responses. 2nd post because I'm hoping more security minded people will peruse in this area and have answer...
>>
How can you block a specific IP from making a POP connection?
>>
I've already
iptables -A INPUT -j DROP -s (IP#)
and put the IP # in /etc/apf/host.deny

but the POP connections keep happening. How is this possible? I'm guessing because POP works on username/auth not IP#/auth, even though IP addy is logged.

any help?
thanks,
JM

self - help post

so I found /etc/mail/access and added
IP# REJECT
makemap hash /etc/mail/access.db < /etc/mail/access
/etc/rc.d/init.d/sendmail restart


anyone want to confirm this was a good idea, I'd appreciate. Otherwise I'll wait to look at logs tomorrow.
Cheers,
JM

didn' t work...what the **^>!
'

how do you stop POP3 connection by IP address???

thanks
JM

/sbin/iptables -A INPUT -p tcp -s x.x.x.x -d x.x.x.x --dport 110 -j DROP