[VOPmail Beta] Blocking specfic spammer without tying up resources?

[Yves Lacombe]

Title: RE: [VOPmail Beta] Blocking specfic spammer without tying up resources?

The only way to do it then is to block him at the router level.  No matter what you do in VOP Mail or ModusMail, it'll still hit port 25 of the mail server even if we close the connection immediately.  Ultimately, if 66.102.225.21 is in north-america, you could always contact them directly to tell them to stop you and even use legal means if reason fails.   Here is what ARIN has to say about 66.102.225.21 OrgName:    Nuhosting Inc. OrgID:      NUHS NetRange:   66.102.224.0 - 66.102.239.255 CIDR: 66.102.224.0/20NetName: NUHOSTING-1 NetHandle:  NET-66-102-224-0-1 Parent:     NET-66-0-0-0-0 NetType:    Direct Allocation NameServer: NS1.NUHOSTING.COM NameServer: NS2.NUHOSTING.COM Comment: RegDate:    2002-07-19 Updated:    2002-07-30 TechHandle: WA158-ARIN TechName:   Aiello, Walter TechPhone:  +1-416-571-8382 TechEmail:  [EMAIL PROTECTED] # ARIN Whois database, last updated 2002-10-01 19:05 # Enter ? for additional hints on searching ARIN's Whois database.   SPEWS has more information on them:   http://spews.org/html/S1869.html   -- Yves Lacombe SPAM Fighting Team T4C/BMC Server Support (514) 845-1666 ext. 300   ----- Original Message ----- From: Network Operations To: [EMAIL PROTECTED] Sent: Wednesday, October 02, 2002 9:56 AM Subject: [VOPmail Beta] Blocking specfic spammer without tying up resources? I think he is saying he already has him banned but is trying to stop the constant connection attempts.   �our blacklist and they try over and over and over again�   RBL will not help.   -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Adil Sent: Wednesday, October 02, 2002 9:45 AM To: '[EMAIL PROTECTED]' Subject: [VOPmail Beta] Blocking specfic spammer without tying up resources?     Use real time black lists (RBLs).  This server is already listed in http://relays.osirusoft.com/cgi-bin/rbcheck.cgi?addr=66.102.225.21. So far I have no problem with ORDB and osirusoft. Even with Sieve running RBLs are stopping huge amount of spam. During a normal day RBLs allowed my server  to reject mail from 4459 unique ip addresses. Theses addresses were rejected for a total of 92814 times during that 24 hours period. I use ORDB as the first list and osirusoft as the second. ORDB stopped 32479 attempts while osirusoft stopped 60335. Osirusoft may generate some false positives. My idea is that you use RBLs when they are solving problems, and stop when they cause problems. Thanks you, Adil -----Original Message----- From: Robb Bryn [mailto:[EMAIL PROTECTED]] Sent: Wed, October 02, 2002 4:16 PM To: [EMAIL PROTECTED] Subject: [VOPmail Beta] Blocking specfic spammer without tying up resources?   * This is the vopmailbeta mailing list *   In the past few days we have gone from an average of 20-30 thousand messages a day to 300-400 thousand.  We have one SMTP host that is on our blacklist and they try over and over and over again.  Is there anything I can do to keep these guys from typing up resources on my server?  66.102.225.21 (blk2.net1-21.nuhosting.com):  192846 blocked attempts 66.102.225.22 (blk2.net1-22.nuhosting.com):  201672 blocked attempts We are running VopMail 5.3 on a Windows 2k box (SP2) Thanks Robb Bryn ** To leave this list, send an email to [EMAIL PROTECTED] and put the word "LEAVE" in the BODY of the email.