I have a spambot that likes to spam my websites. I mailed to abuse@isp, but he ignored me.
Attacks always come from the same ip, and i used IISIP to add the spammer IP to all of my websites.
I am wondering, since i am using a linux box with shorewall as a firewall... maybe is better to filter at that level?
Which one has better performance with a list that might grow and become huge? IIS giving a 403 page to the spammers, or shorewall dropping the connections?