Redirecting mail (Re: Throttling mail)

Bil Herd bherd at ins-business.com
Thu Mar 25 21:39:38 UTC 2004


Not to sound like a commercial for Cisco, but their IDS stuff does
rewrite ACL's based upon signatures.

Bil Herd

-----Original Message-----
From: J.D. Falk [mailto:jdfalk at cybernothing.org] 
Sent: Thursday, March 25, 2004 4:30 PM
To: nanog at merit.edu
Subject: Re: Redirecting mail (Re: Throttling mail)



On 03/25/04, Valdis.Kletnieks at vt.edu wrote: 

> On the other hand, it's probably more effective to find some way of 
> making the Cisco gear block outbound 25 from abusive machines.

	Inbound also.  The spammers have been using triangular routing
	for a while.

	(They dial in someplace, get an IP, and use a broadband
connection 
	to send packets with a forged source address of that dialup IP.)

-- 
J.D. Falk                                     "be crazy dumbsaint of the
mind"
<jdfalk at cybernothing.org>                               -- Jack Kerouac



More information about the NANOG mailing list