I have a mail server on my network. Every 60 seconds a particular machine outside my network attempts to send spam through it.
My mail server is blocking it (and has been for apparently weeks), but, quite frankly, I'd just like this one machine to go away.
How do I set this up? I have an entry in the virutal servers list which forwards the request from the router to my mail server. Right now the inbound filter is set to "allow all". On the inbound filter list I have a rule that deny's this IP address.
My question is: should the rule also have an ALLOW for every other IP? I don't want to block the world, just this one particular address