[69113] in North American Network Operators' Group
RE: Redirecting mail (Re: Throttling mail)
daemon@ATHENA.MIT.EDU (Bil Herd)
Thu Mar 25 16:40:19 2004
Date: Thu, 25 Mar 2004 16:39:38 -0500
From: "Bil Herd" <bherd@ins-business.com>
To: "J.D. Falk" <jdfalk@cybernothing.org>, <nanog@merit.edu>
Errors-To: owner-nanog-outgoing@merit.edu
Not to sound like a commercial for Cisco, but their IDS stuff does
rewrite ACL's based upon signatures.
Bil Herd
-----Original Message-----
From: J.D. Falk [mailto:jdfalk@cybernothing.org]=20
Sent: Thursday, March 25, 2004 4:30 PM
To: nanog@merit.edu
Subject: Re: Redirecting mail (Re: Throttling mail)
On 03/25/04, Valdis.Kletnieks@vt.edu wrote:=20
> On the other hand, it's probably more effective to find some way of=20
> making the Cisco gear block outbound 25 from abusive machines.
Inbound also. The spammers have been using triangular routing
for a while.
(They dial in someplace, get an IP, and use a broadband
connection=20
to send packets with a forged source address of that dialup IP.)
--=20
J.D. Falk "be crazy dumbsaint of the
mind"
<jdfalk@cybernothing.org> -- Jack Kerouac
