Security Basics mailing list archives

Re: Blocking traffic by Country to reduce spam


From: Pierj <pierj () pierj it>
Date: Mon, 22 Jun 2009 18:01:05 +0200

IMO this is not the right way to fight spam,
spammers (zombies sending spam) are worldwide located no matter the area.
Filtering traffic from ip blocks not in uk and us doesn't stop spam,
lost only mails (good or not).
Maybe a good idea to use an anti spam solution, from the opensource
spamassassin + dcc + pyzor + bayesan, to commercial solutions add-on to
the opensource like ip reputation from commtouch, to a total commercial
solution like Pineapp (cheap) or IronPort (expensive).
With the first solution (open source) you are able to filter 70% of
spam, adding the ip reputation system you can go to 80%, with commercial
solutions you can filter 90-97% of spam.

Hope this can help you.
Have a nice day.


paavan.shah () gmail com wrote:
Hello List,

One of our clients is based in USA and has most of the business in USA and UK.

To reduce spam we are planning to propose them a solution to filter traffic by country.

We can add IP Blocks for USA and UK as a whitelist and allow only incoming access to those IP Blocks,everything else 
is blocked.

Has anyone implemented this change on their production networks?Has it been effective to reduce spam?

Please share your views and experiences

------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute

Need to pass the CISSP? InfoSec Institute's CISSP Boot Camp in both Instructor-Led and Online formats is the most 
concentrated exam prep available. Comprehensive course materials and an expert instructor means you pass the exam. 
Gain a laser like insight into what is covered on the exam, with zero fluff! 

http://www.infosecinstitute.com/courses/cissp_bootcamp_training.html
------------------------------------------------------------------------



-- 

Pierj


------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute

Need to pass the CISSP? InfoSec Institute's CISSP Boot Camp in both Instructor-Led and Online formats is the most 
concentrated exam prep available. Comprehensive course materials and an expert instructor means you pass the exam. Gain 
a laser like insight into what is covered on the exam, with zero fluff! 

http://www.infosecinstitute.com/courses/cissp_bootcamp_training.html
------------------------------------------------------------------------


Current thread: