Jump to content


gateway getting attacked

  • Please log in to reply
2 replies to this topic

#1 slcounty

  • Members
  • 1 posts

Posted 18 August 2018 - 09:24 PM

We have a subnet attacking our barracuda gateway 200 every 30 seconds. I have done a lookup on this subnet domain unknown and there are 1400 complaints. I sceen this activity in the logs and every 30 seconds a message is being deferred no domain just ip and it always comes from the same subnet. Why is this being deferred and not just refused the mail in question is not addressed to a user. How can I put an end to this activity? If anyone has any ideals I appreciate hearing them.   

#2 N/A

  • Members
  • 2 posts

Posted 19 August 2018 - 11:31 PM

You can use Block/Accept -> IP Filters -> Blocked IP/Range.

#3 Jaybone

  • Members
  • 118 posts

Posted 06 September 2018 - 07:43 AM

If your device is inside your perimeter firewall, block it at the perimeter firewall.