nanog mailing list archives
Re: ISP wants to stop outgoing web based spam
From: Hank Nussbacher <hank () efes iucc ac il>
Date: Thu, 10 Aug 2006 22:50:23 +0300 (IDT)
On Thu, 10 Aug 2006, Peter Corlett wrote:
On 10 Aug 2006, at 19:12, Hank Nussbacher wrote:I'll answer on-list since this answer can benefit others. The primary reason that the ISP wants to block outbound webmail spam is because the 100s of BLs on the Internet end up blocking large segments of the IP space due to spam reporting by end users. The spammer can end up "burning" quite a few IPs before the feedback loop of user->spam report->BL->ISP->block is completed. Therefore the ISP wants to be proactive and shut off the spam before it even starts. Even if it means losing revenue.This seems to imply that you're using dynamic addressing.
Not in the least. Every downstream customer is assigned a small range of static IPs. Some get 8 IPs. Over the course of a month, the spammer would walk into the cybercafe and "burn" a different IP each time until every PC in the small cybercafe would be non-functional. And we have gone through all the administrative ideas for combating this. No need to review that. Been there. Done that. Lots of times. If you have some technological solution - then please post so all can benefit. If you have nice ideas, or thoughts, please spare the N:I ratio and end this thread.
-Hank Nussbacher http://www.interall.co.il
The rather obvious solution would seem to be that you provide static addressing. It also makes it rather easier to identify the spammer when the complaints come in since you won't need to grovel through your RADIUS logs.
Current thread:
- ISP wants to stop outgoing web based spam Hank Nussbacher (Aug 09)
- Re: ISP wants to stop outgoing web based spam Michael K. Smith - Adhost (Aug 09)
- Re: ISP wants to stop outgoing web based spam Jeroen Massar (Aug 09)
- Re: ISP wants to stop outgoing web based spam Allan Poindexter (Aug 09)
- Re: ISP wants to stop outgoing web based spam Michael Nicks (Aug 09)
- Re: ISP wants to stop outgoing web based spam Hank Nussbacher (Aug 10)
- Re: ISP wants to stop outgoing web based spam Ken Simpson (Aug 10)
- Re: ISP wants to stop outgoing web based spam Hank Nussbacher (Aug 10)
- Re: ISP wants to stop outgoing web based spam Peter Corlett (Aug 10)
- Re: ISP wants to stop outgoing web based spam Hank Nussbacher (Aug 10)
- Re: ISP wants to stop outgoing web based spam Michael Nicks (Aug 10)
- Re: ISP wants to stop outgoing web based spam Michael K. Smith - Adhost (Aug 09)
- Re: ISP wants to stop outgoing web based spam Hank Nussbacher (Aug 10)
- Re: ISP wants to stop outgoing web based spam Florian Weimer (Aug 11)
- Re: ISP wants to stop outgoing web based spam Hank Nussbacher (Aug 11)
- <Possible follow-ups>
- RE: ISP wants to stop outgoing web based spam Jeroen Massar (Aug 09)
- Re: ISP wants to stop outgoing web based spam Matthew Black (Aug 09)
- Re: ISP wants to stop outgoing web based spam Paul Jakma (Aug 09)
- Message not available
- Re: ISP wants to stop outgoing web based spam Paul Jakma (Aug 09)
- Captchas was Re: ISP wants to stop outgoing web based spam Simon Waters (Aug 10)
- Re: ISP wants to stop outgoing web based spam Matthew Black (Aug 09)