Take the tour ×  I have a spambot that likes to spam my
websites. I mailed to abuse@isp, but he ignored me.  Attacks
always come from the same ip, and i used IISIP to add the
spammer IP to all of my websites.  I am wondering, since i am
using a linux box with shorewall as a firewall... maybe is
better to filter at that level?  Which one has better
performance with a list that might grow and become huge? IIS
giving a 403 page to the spammers, or shorewall dropping the
connections?  share|improve this question Ignoring mails that
come to abuse@isp is plain rude. People send mail to abuse@ as
last resort, because they need help, not because they want to
screw up somebody's weekend. If that wouldn't affect my
business, I'd go mad and block the whole ISP at the firewall
level. –  Anonymous Jan 26 '10 at 17:16 add comment  3 Answers
up vote 13 down vote accepted  If you are getting a lot of
traffic from these spambots, then you are best to drop them at
the firewall. Dropping at IIS means putting extra load on your