Re: [Shorewall-users] Is is possible to do "shorewall reject 1.1.1.1 tcp 25"

[Alex M. <sho...@re...>]

Ben Greiner wrote:

> I didn't tried it, but what I would do is:
>
> - creating a new zone, let's say "rsmtp"
>
> - creating a rule that for hosts in this zone smtp access should be 
> rejected
>
> - dynamically adding hosts to this zone via shorewall add

Great idea!

I guess, then, is there a way to extract the hosts that have been 
dynamically added to this zone, so I could populate a static list that 
could be used for the blacklist file when i do a shorewall restart?

Thanks,
Alex Martin
http://www.rettc.com