As I was adding more and more IPs to the control access list something occurred to me. It seems that most of the offending IPs are from cablevision companies. If I could get the range of their dynamic IPS I could block them all, permanently. I doubt anyone would be using dynamic IPs to host a mail server at home, if they are using a cable companies SMTP I doubt it would be listed as one of the dynamics. This would stop my server from ever getting mail from any virus that has its own SMTP engine. Also if this SoBig ever does update itself to send anonymous spam, those too won't hit my server.
This is something that people started working on back in May. The problem is that it just isn't possible to determine whether an IP is static or dynamic, and most cable and DSL companies provide both residential and business class service. There are some spam lists that include the IP ranges that appear to be dynamic -- and ones that list reverse DNS entries that appear to be dynamic -- they all have significant false positives.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
