On 2013-06-07 19:18, Peer-to-Peer (Spam-Filter.com) wrote:

I’m seeing one spammer who’s IP address is (x.x.x.x).  Or at least that’s the originating IP in the headers.   I’m seeing thousands of messages originating from this IP, however they are passing thru hundreds of different Verizon and Comcast servers.  Literally.

 

I can’t block (or I don’t want to block) the Verizon or Comcast IP’s, but I need to block the originating IP (x.x.x.x).


I think you have misunderstood what drilldown does.

If you teach drilldown to recognize the versizon and comcast servers then it will learn to ignore them and pinpoint this specific IP. It will also learn to find any other IPs that are doing the same kind of thing.

_M

-- 
Pete McNeil
Chief Scientist
ARM Research Labs, LLC
www.armresearch.com
866-770-1044 x7010
twitter/codedweller 

#############################################################

This message is sent to you because you are subscribed to

  the mailing list <sniffer@sortmonster.com>.

This list is for discussing Message Sniffer,

Anti-spam, Anti-Malware, and related email topics.

For More information see http://www.armresearch.com

To unsubscribe, E-mail to: <sniffer-...@sortmonster.com>

To switch to the DIGEST mode, E-mail to <sniffer-dig...@sortmonster.com>

To switch to the INDEX mode, E-mail to <sniffer-in...@sortmonster.com>

Send administrative queries to  <sniffer-requ...@sortmonster.com>

Reply via email to