<HTML><HEAD></HEAD>
<BODY dir=ltr>
<DIV dir=ltr>
<DIV style="FONT-SIZE: 10pt; FONT-FAMILY: 'Arial'; COLOR: #000000">
<DIV>Dear All,</DIV>
<DIV> </DIV>
<DIV>To block spammer by mail subject or contents, i’m using below rules:</DIV>
<DIV> </DIV>
<DIV>drop tcp any any -> any [25,143,465,587,993] (msg:"***** SPAMMER *****";
dsize:>0; content:"Sample Greeting"; sid:10000; rev:1;)</DIV>
<DIV> </DIV>
<DIV>And i found on my mail server the email send by spammer similar with
content:"Sample Greeting"; are not reach the receipent, But on mail server log i
still found the attacker IP are still get connected to SMTP services and that
make my SMTP services are going high, so how can i make the attacker are didnt
reach at all to SMTP services ?</DIV>
<DIV> </DIV>
<DIV>Please help. TQ so much</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV></DIV></DIV></BODY></HTML>