Cloud service [was: RE: EC2 and GAE means end of ip address reputation industry? (Re: Intrustion attempts from Amazon EC2 IPs)]

Christopher Morrow morrowc.lists at
Tue Jun 24 03:45:14 UTC 2008

On Mon, Jun 23, 2008 at 10:31 PM, Frank Bulk - iNAME <frnkblk at> wrote:
> Ken:
> Thanks for the info, but that still requires the domain owner to change
> their MX records.  I was wondering if there was something that could
> literally be placed in the flow of traffic, like an FWSM in transparent
> mode.

That probably depends a lot on the topology in question... Doing it on
'ethernet' is far different from doing it on T1 over ATM or
channelized oc-48... A Checkpoint FW can do this sort of thing with a
'security server' (though performance is certainly a question...).

I think you're also always stuck in a store-and-forward mode so 'on
the wire' isn't really helpful for SMTP, often you can't make a
decision about an email without getting a large portion of it down, so
snuffing connections mid-stream isn't going to help your email infra
very much :(


> Frank
> -----Original Message-----
> From: Ken Simpson [mailto:ksimpson at]
> Sent: Monday, June 23, 2008 5:23 PM
> To: nanog at
> Subject: Re: Cloud service [was: RE: EC2 and GAE means end of ip
> addressreputation industry? (Re: Intrustion attempts from Amazon EC2 IPs)]
>> On Mon, Jun 23, 2008 at 6:01 PM, Frank Bulk - iNAME <frnkblk at
>>> wrote:
>> > Is there a vendor that makes a product that perform spam/malware
>> > filtering literally in the network, i.e. as a service provider,
>> > can I provide spam filtering for the enterprises in my customer
>> > base by adding a piece of network gear?  I'm not aware of one
>> > today except those who provide enterprise-oriented gateways like
>> > SonicWall.
>> Symantec Mail Security / Turntide
>> Mailchannels Traffic Control
>> --srs
> BTW, we CAN do "in the cloud" email traffic shaping - on EC2,
> ironically. But also on your own equipment if that's your preference.
> Regards,
> Ken
> --
> Ken Simpson
> MailChannels - Reliable Email Delivery
> 604 685 7488 tel

More information about the NANOG mailing list