[91745] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: ISP wants to stop outgoing web based spam

daemon@ATHENA.MIT.EDU (Simon Waters)
Fri Aug 11 04:16:46 2006

From: Simon Waters <simonw@zynet.net>
To: Hank Nussbacher <hank@efes.iucc.ac.il>
Date: Fri, 11 Aug 2006 09:16:11 +0100
Cc: Nanog <nanog@merit.edu>
In-Reply-To: <Pine.LNX.4.64.0608110721220.9368@efes.iucc.ac.il>
Errors-To: owner-nanog@merit.edu


On Friday 11 Aug 2006 05:24, Hank Nussbacher wrote:
> On Thu, 10 Aug 2006, Florian Weimer wrote:
> > You should look after the automated tools (probably using a virus
> > scanner or something like this) and trigger a covert alert once they
> > are detected.  If the spam sent out is of the right kind, you can
> > phone the police and have the guy arrested.
>
> Please show me which virus scanner scans html pages for the words like V I
> A G R A, or Free M O R T G A G E, as it is going outbound.

HTTP::Proxy ?

I don't know what the icap support in Squid 3 will offer.

I'm with Florian, you are looking for a technical solution, when the problem 
is best solved on the ground.

Did you consider that perhaps your customer really is the spammer, or is 
complicit in the abuse?

home help back first fref pref prev next nref lref last post