hi all,

i have this log from mailbox.log, here is the log :
2010-06-21 13:37:12,867 INFO [Pop3Server-6700] [ip=72.13.5.196;] account - authentication failed for hoops (no such account)
2010-06-21 13:37:12,867 INFO [Pop3Server-6700] [ip=72.13.5.196;] pop - -ERR login failed (PASS ****)
2010-06-21 13:37:12,870 INFO [Pop3Server-6625] [ip=72.13.5.196;] pop - quit from client
2010-06-21 13:37:12,870 INFO [Pop3Server-6625] [] ProtocolHandler - Handler exiting normally
2010-06-21 13:37:12,870 INFO [Pop3Server-6625] [ip=72.13.5.196;] pop - connected
2010-06-21 13:37:12,886 INFO [Pop3Server-6694] [ip=72.13.5.196;] account - authentication failed for hanson (no such account)
2010-06-21 13:37:12,886 INFO [Pop3Server-6694] [ip=72.13.5.196;] pop - -ERR login failed (PASS ****)
2010-06-21 13:37:12,899 INFO [Pop3Server-6673] [ip=72.13.5.196;] account - authentication failed for honey (no such account)
2010-06-21 13:37:12,899 INFO [Pop3Server-6673] [ip=72.13.5.196;] pop - -ERR login failed (PASS ****)
2010-06-21 13:37:12,907 INFO [Pop3Server-6676] [ip=72.13.5.196;] pop - quit from client
2010-06-21 13:37:13,229 INFO [Pop3Server-6731] [ip=72.13.5.196;] account - authentication failed for george (no such account)
2010-06-21 13:37:13,229 INFO [Pop3Server-6731] [ip=72.13.5.196;] pop - -ERR login failed (PASS ****)
2010-06-21 13:37:13,232 INFO [Pop3Server-6703] [ip=72.13.5.196;] account - authentication failed for isaac (no such account)
2010-06-21 13:37:13,232 INFO [Pop3Server-6703] [ip=72.13.5.196;] pop - -ERR login failed (PASS ****)
2010-06-21 13:37:13,263 INFO [Pop3Server-6642] [ip=72.13.5.196;] account - authentication failed for guido (no such account)
2010-06-21 13:37:13,263 INFO [Pop3Server-6642] [ip=72.13.5.196;] pop - -ERR login failed (PASS ****)
2010-06-21 13:37:13,271 INFO [Pop3Server-6386] [ip=72.13.5.196;] account - authentication failed for hockey (no such account)
2010-06-21 13:37:13,271 INFO [Pop3Server-6386] [ip=72.13.5.196;] pop - -ERR login failed (PASS ****)
2010-06-21 13:37:13,278 INFO [Pop3Server-6729] [ip=72.13.5.196;] pop - quit from client


how do i block ipaddress in zimbra? coz the spammer using same ip address? i mean if spammer using same ip to access some users id (there is no users id like that in my zimbra) can direct to blacklist ip? how to do that?

sorry newbie... thanks
5.0.9_GA_2533.RHEL5_20080815132719 CentOS5 FOSS edition


alherman