Blacklist an IP?

[timo]

I have an IP that I’m repeatedly getting spam from. I added it to iptables like this:

iptables -I INPUT -s xxx.xxx.xxx.xxx -j DROP

This successfully seems to block any communication coming from that IP address (including their emails), but the setting doesn’t survive a reboot. Any other recommended method to explicitly prevent an IP from sending emails to my domain?

I read multiple community topics and Github notes and couldn’t get a clear answer what the current best way to do this is.

[timo]

@stevetoza I see your chiming in on https://github.com/mail-in-a-box/mailinabox/issues/357

Any luck getting more custom settings set up for spam filtering?

[phildar]

I used ufw to block an annoying ip address. It came installed for me.

ufw deny from xx.xx.xx.xx

ufw status to check what is set up.

[timo]

@phildar that worked and survived a reboot! Thanks so much. Hopefully that other discussion I sent you was of use. Thanks for chiming in and helping with this.

[timo]

Update: Adding the ufw rule to deny held fine after a reboot but that remote junk mail server was still able to connect and I received an email from them. It seems I needed to reorder my ufw rules to putting that deny at the top. I followed the instructions found here.