[51897] in North American Network Operators' Group
Re: How do you stop outgoing spam?
daemon@ATHENA.MIT.EDU (Eliot Lear)
Mon Sep 9 20:16:54 2002
Date: Mon, 09 Sep 2002 17:15:27 -0700
From: Eliot Lear <lear@cisco.com>
To: Paul Vixie <vixie@vix.com>
Cc: nanog@merit.edu
Errors-To: owner-nanog-outgoing@merit.edu
Paul Vixie wrote:
> per-destination host AND port egress rate shaping. if someone tries to send
> more than 1Kbit/sec to all port 80's, or more than 1Kbit/sec to any single
> IP address, then you can safely RED their overage. this violates the whole
> peer-to-peer model but there's no help for that in the short term. if some
> internet cafe has a CuCme camera setup then you can find a way to let that
> traffic off-net without rate shaping. this will be the exception.
Please be aware that this could have unintended consequences, and should
be used in very constrained ways. In particular, there are any number
of applications, including VPN applications that use port 80. I would
recommend that only specified destinations get such treatment, if you
apply it at all.
Eliot
