[SOLVED] How to block by IP address

[gacain]

Hi -

I'm a new Zimbra administrator.

I have a user that is getting 3 or 4 virus-infected email messages every day. The messages have differing "From:" in the headers, but they are all from the same IP address. I understand that I can use spamassassin to blacklist senders by email address, but I've not seen anything that tells me I can blacklist by IP address. Is this possible to do? Or, would it be a better solution to just block the address in my router?

Any advice would be much appreciated.

Thanks.

Greg

[p24t]

I believe you can block by IP, using a filter like this one I found on some obscure forum:

header ANNOYING_SPAMMER Received =~ /255\.255\.255\.255/
describe ANNOYING_SPAMMER Mark mail from 255.255.255.255 as spam
score ANNOYING_SPAMMER 5

However, if you can, you might as well block that IP, and then your mail server won't even have to worry about them.

[gacain]

Originally Posted by p24t

I believe you can block by IP, using a filter like this one I found on some obscure forum:

header ANNOYING_SPAMMER Received =~ /255\.255\.255\.255/
describe ANNOYING_SPAMMER Mark mail from 255.255.255.255 as spam
score ANNOYING_SPAMMER 5

However, if you can, you might as well block that IP, and then your mail server won't even have to worry about them.

Ok, great - thanks much for this information.