Redirecting mail (Re: Throttling mail)

Thu Mar 25 20:04:20 UTC 2004

On Thu, 25 Mar 2004 13:51:13 CST, you said:
> of abusive mail. After all, it does take time to read and act upon abuse 
> reports. By forcing smtp through a specific server at least some proactive 
> measures are possible such as throttling abusive behaviour. 

Forcing it through a server doesn't automagically add the ability to throttle
abusive behavior.  It's merely the obvious sledgehammer fix.

Now consider a router that's instrumented to collect flow data, feeding a
real-time system that throttles the port if something abusive happens.  You get
the same benefits of not having to read and act on abuse reports, plus you
don't break non-abusive uses of the network.

(And yes, we consider that a primary tool - we got lots of "your user has Witty"
e-mails, and *every single one* we already knew about because we'd pulled the
flow data and done the obvious things....)

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20040325/cebf07e5/attachment.sig>