Re: [Declude.JunkMail] Spam attack

[Nick Hayer]

Hi Richard, Richard Farris wrote: I got hit again with these two [69.60.97.208] 209.97.209.0/24   other than blacklisting the IP, how do you stop it... What I do is lookup the IP on senderbase. puts its ip addresses that send mail in an ip_hosts.txt file and score that file one fourth my delete weight. I then look up the network owner. From that I add associated names to my bodydomains.txt file that I score the same. I also take more ip addresses of hosts and add them to the ip_hosts text file.  I also do an Arin lookup of the ip space to get more info adding info to an ip_networks,txt file as need be. This is somewhat time consuming however you will be amazed in a short time how the efforts pay off.   ....any suggestions would be appreciated.. Need to see your config and an explanation of how you score to give more info. Feel free to email me off list if you prefer - -Nick Richard Farris Ethixs Online 1.270.247.5555 Office 1.800.548.3877 Tech Support "Crossroads to a Cleaner Internet" ----- Original Message ----- From: Richard Farris To: Declude.JunkMail@declude.com Sent: Saturday, July 16, 2005 1:27 PM Subject: [Declude.JunkMail] Spam attack FYI, I got slammed by these two IPs last nite..207.32.221.0/24 216.14.20.0/24   Did anyone else see this.... Richard Farris Ethixs Online 1.270.247.5555 Office 1.800.548.3877 Tech Support "Crossroads to a Cleaner Internet