AFAIK, you can only block HTTP content using NBAR, although Cisco is working on adding additional protocols for classifying content.
You can use the IDS features in the IOS to catch some SPAM related mail, such as the number of recipients in an email message. Based on this you could setup your mail gateway to reject mail from certain domains in the future. Your best bet is to install a real SMTP gateway filter that will allow you to block SPAM and emails with certain attachments. (i.e. .exe, .vbs, .bat, etc) You can find some open source tools for these sorts of tasks here: http://www.linux.org/apps/all/Administration/Anti-Spam.html and here: http://www.amavis.org/ HTH, Kent -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of BH Sent: Wednesday, April 10, 2002 6:29 AM To: [EMAIL PROTECTED] Subject: How can you block spam email with NBAR? [7:41029] Can spam be blocked with NBAR? Perhaps similar to how urls can be blocked with match protocol http url "iishack" ? The match protocol option does not allow any granularity with the smtp directive. THanks! b Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41217&t=41029 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
