blocking an ip?

[Soybomb]

here at work we've been having to reboot our webserver/mailserver box every morning because when we come in it seems to just be refusing to send email or serve pages.

I was digging in the /var/log/maillog and found this error message repeated everyday from the time it stops working until we reboot.
Mar 21 05:08:31 kccn sendmail[11828]: FAA11828: lost input channel from [64.208.135.149]
Mar 21 05:08:31 kccn sendmail[11828]: FAA11828: from=<idg26-errors+317458+ginag+kc.cc.il.us@bounce.idg.net>, si
ze=6389, class=0, pri=0, nrcpts=0, proto=ESMTP, relay=[64.208.135.149]

Everyday we've got the lost input channel from 64.208.135.149 errors. That server would be the mail server for a mass email service. How can we just block them from connecting to our machine? will simply adding the ip to the /etc/hosts.deny do it? The machine is running redhat 6.2 by the way.

Any help is appeciated :)
john

[Tyr-7BE]

Haven't really thought too much about your specific error, but if you want to block an ip, hosts.deny is the way to go :) You'll have to restart sendmail in order for it to take effect, but this can be done with a killall and a restart of the executable...no need to reboot :)