I have been doing that, but I have heard that IMAIL's CAL can only
handle 100 IPS and I am running at about 90 now. Most of the offenders
are from Optimum online, I could block their whole IP range, but then I
think my home Optimum users trying to POP or SMTP (maybe even
Webmail)won't be able to connect to my machine. I can use the Declude
IP blacklist, but that is not removing the processing time required.
When I get hit like I did on Friday, I call and e-mail Optimum, but they
really haven't done anything. Usually within 2 or 3 days I get more
SOBIGS from the same machine (HIPHOPSOUNDS) name with a slightly
different IP. So when the cable modem keeps getting a different IP from
cable the machine can then blast me again
You would think Optimum would know who has leased an IP and then contact
them, just in the interest of protecting their own network.
Stupid virus.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Eje Gustafsson
Sent: Monday, September 08, 2003 10:43 AM
To: Jeff Pereira
Subject: Re[2]: [Declude.Virus] SoBig more prolific now?
If I where you and the infected machine connected directly to your
mailserver I would create a BAN in Imail for this ip to prevent it to
even connect and send anything to your server.
/ Eje
Monday, September 8, 2003, 5:28:14 AM, you wrote:
JP> I have sort of resigned myself to just continue deleting them as
they come
JP> in.
JP> Hopefully they will actually stop on the 20th.
JP> jp
JP> - Original Message -
JP> From: "Hermann Strassner" <[EMAIL PROTECTED]>
JP> To: <[EMAIL PROTECTED]>
JP> Sent: Monday, September 08, 2003 3:59 AM
JP> Subject: RE: [Declude.Virus] SoBig more prolific now?
>> > were sent to a single address on my domain at the rate of about 1
per
>> > minute. Does anyone know how fast it sends? Does it have anything
to
>> > do with the speed of the infected computer? I'm just curious.
>>
>> I think it depends on the speed of the internet connection, and if it
is
>> fast enough, from the speed of the PC.
>>
>> Hermann
>>
>> ---
>> [This E-mail was scanned for viruses by Declude Virus
JP> (http://www.declude.com)]
>>
>> ---
>> This E-mail came from the Declude.Virus mailing list. To
>> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
>> type "unsubscribe Declude.Virus".The archives can be found
>> at http://www.mail-archive.com.
>> ---
>> [This E-mail scanned for viruses by Declude Virus]
>>
>>
JP> ---
JP> [This E-mail scanned for viruses by Declude Virus]
JP> ---
JP> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
JP> ---
JP> This E-mail came from the Declude.Virus mailing list. To
JP> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
JP> type "unsubscribe Declude.Virus".The archives can be found
JP> at http://www.mail-archive.com.
Best regards,
Eje Gustafsson mailto:[EMAIL PROTECTED]
---
The Family Entertainment Network eFax : 240-376-7272
Phone : 620-231- Fax : 620-231-4066
Online Store http://www.fament.com/catalog/
- Your Full Time Professionals -
--
[This E-mail scanned for viruses by Declude Virus]
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]
---
[This E-mail scanned for viruses by Declude Virus]
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.
