Re: DDoS Question

2007-09-27 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -- "Hex Star" <[EMAIL PROTECTED]> wrote: > This problem is easily solved by simply rejecting mail sent by servers on > dynamic IP ranges... Great. I guess we can all go home now. :-) - - ferg -BEGIN PGP SIGNATURE- Version: PGP Desktop

Re: DDoS Question

2007-09-27 Thread Hex Star
This problem is easily solved by simply rejecting mail sent by servers on dynamic IP ranges...

Re: DDoS Question

2007-09-27 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -- Sean Donelan <[EMAIL PROTECTED]> wrote: >See all the previous mail threads about ISPs not doing anything :-) > >Stop the bots on your networks; work with people to stop the bots >on other networks; work with law enforcement to put the criminals

Re: DDoS Question

2007-09-27 Thread Sean Donelan
On Thu, 27 Sep 2007, Martin Hannigan wrote: They randomize the name on the subject line. Is this any particular virus/malware/zombie signature Nothing particularly new. The Bots have been pumping this one out for at least a month, although the subject line has a few variations besides just ch

Re: DDoS Question

2007-09-27 Thread Martin Hannigan
On 9/27/07, Raymond L. Corbin <[EMAIL PROTECTED]> wrote: > Did you check the source IP in the headers? My logs show that they are > coming from a buncha residential IP addresses so its prolly a bot > network doing it. Most of the messages going through our servers with > that have the domain lifel

Re: DDoS Question

2007-09-27 Thread Roland Dobbins
On Sep 28, 2007, at 6:49 AM, Ken Simpson wrote: You might want to look at some kind of edge email traffic shaping layer. So that 'Curtis Blackman' is the only one getting SMTP through to Martin and his customers? ;> Assuming nothing in the header which could be blocked by S/RTBH or AC

RE: DDoS Question

2007-09-27 Thread Raymond L. Corbin
Did you check the source IP in the headers? My logs show that they are coming from a buncha residential IP addresses so its prolly a bot network doing it. Most of the messages going through our servers with that have the domain lifeleaksfromyo.com in it which is causing the messages to fail in our

Re: DDoS Question

2007-09-27 Thread Ken Simpson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > They randomize the name on the subject line. Is this any particular > virus/malware/zombie signature and any suggestion on how to defend > against it besides what I'm already doing (which is all of the > obvious, rbls, spam appliances, hot cocoa, et

DDoS Question

2007-09-27 Thread Martin Hannigan
Folks, I'm receiving about 25K spams per minute with this subject: Subject: "Looking for Sex Tonight? Curtis Blackman" They randomize the name on the subject line. Is this any particular virus/malware/zombie signature and any suggestion on how to defend against it besides what I

Re: abandon cable & the price of copper

2007-09-27 Thread Nathan Ward
On 14/09/2007, at 12:48 AM, [EMAIL PROTECTED] wrote: this might be a revenue stream ... As I recall, it's also a big source of outages in Vietnam (I think?); soldiers are allowed to haul up 'old' copper cable from the sea and sell it. Of course, telling if something's copper or fibre or de