[Mimedefang] Spammers who won't take no for an answer

Ben Kamen bkamen at benjammin.net
Tue Oct 21 08:56:03 EDT 2003



route add -host <ipaddr> 127.0.0.1 -blackhole

is fun too.

I recently had to null-route about 12000 addresses at ameritech.net
because of someone trying to had my mail server. (27,000 attempts over 3
days)


 -Ben





On Tue, 21 Oct 2003, David F. Skoll wrote:

> On Tue, 21 Oct 2003, Daniel Kasak wrote:
>
> > What would be great is if you could integrate the excellent tool
> > 'smbdie' into mimedefang / canit, and blue-screen the computers of
> > repeat offenders.
>
> Well, fun as that sounds, it's unethical and probably illegal.  However,
> I would definitely consider firewalling off a host that ignores too many
> 5xx codes.  I think if a host tries sending the same message 5 times
> in the face of 5xx, then traffic from it should be silently discarded
> for a couple of days, or it should be redirected to a tarpit machine.
>



More information about the MIMEDefang mailing list