[70570] in North American Network Operators' Group
Re: Barracuda Networks Spam Firewall
daemon@ATHENA.MIT.EDU (Richard Cox)
Wed May 19 18:32:58 2004
From: Richard Cox <richard@mandarin.com>
To: nanog@nanog.org
Reply-To: nanog@mandarin.com
In-Reply-To: <1085004749.8605.80.camel@antitrust.6o4.ca>
Date: Wed, 19 May 2004 22:29:51 +0000 (GMT)
Errors-To: owner-nanog-outgoing@merit.edu
On 19 May 2004 15:12:29 -0700 James Couzens <jcouzens@6o4.ca> wrote:
|> if URL IP addr is in China then score=3D100
| I beg to differ Eric A. Hall.
=2E..
|=20
| So contrary to what you said, perhaps I should just Null Route all
| email originating from the USA? ;)
While this is verging off our remit here, I would clarify the point
originally made, which is that if a URL - that is, a URL cited in the
body of a message - points to an IP physically located in China, then
that signals a high probability of the message being spam.
The physical source of the message - which is likely to be in the US
or China - will most probably not be visible to the recipient due to
the use of anonymising proxies and other "zombie" senders - those IPs
are likely to be on "consumer" networks just about anywhere ...
--=20
Richard Cox
