[51870] in North American Network Operators' Group
Re: How do you stop outgoing spam?
daemon@ATHENA.MIT.EDU (Iljitsch van Beijnum)
Mon Sep 9 13:23:48 2002
Date: Mon, 9 Sep 2002 19:23:17 +0200 (CEST)
From: Iljitsch van Beijnum <iljitsch@muada.com>
To: Hank Nussbacher <hank@att.net.il>
Cc: <nanog@merit.edu>
In-Reply-To: <Pine.A41.4.10_heb2.08.10209092023350.31700-100000@MaX.att.net.il>
Errors-To: owner-nanog-outgoing@merit.edu
On Mon, 9 Sep 2002, Hank Nussbacher wrote:
> Looking for automatic off-the-shelf solution. Not something that requires
> a NOC to constantly update a Cisco ACL.
Correct me if I'm wrong, but the web (ok, most of it) has been running on
TCP port 80 for quite a while now. So if you limit outgoing TCP packets to
port 80 (and probably some variations, such as HTTP+SSL) to a few kbps,
regardless of their destination, you don't hurt legitimate users except
some very rare cases such as HTTP uploads but you make life less fun for
spammers.