I have been doing that, but I have heard that IMAIL's CAL can only handle 100 IPS and I am running at about 90 now. Most of the offenders are from Optimum online, I could block their whole IP range, but then I think my home Optimum users trying to POP or SMTP (maybe even Webmail)won't be able to connect to my machine. I can use the Declude IP blacklist, but that is not removing the processing time required. When I get hit like I did on Friday, I call and e-mail Optimum, but they really haven't done anything. Usually within 2 or 3 days I get more SOBIGS from the same machine (HIPHOPSOUNDS) name with a slightly different IP. So when the cable modem keeps getting a different IP from cable the machine can then blast me again....
You would think Optimum would know who has leased an IP and then contact them, just in the interest of protecting their own network. Stupid virus..... -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Eje Gustafsson Sent: Monday, September 08, 2003 10:43 AM To: Jeff Pereira Subject: Re[2]: [Declude.Virus] SoBig more prolific now? If I where you and the infected machine connected directly to your mailserver I would create a BAN in Imail for this ip to prevent it to even connect and send anything to your server. / Eje Monday, September 8, 2003, 5:28:14 AM, you wrote: JP> I have sort of resigned myself to just continue deleting them as they come JP> in. JP> Hopefully they will actually stop on the 20th. JP> jp JP> ----- Original Message ----- JP> From: "Hermann Strassner" <[EMAIL PROTECTED]> JP> To: <[EMAIL PROTECTED]> JP> Sent: Monday, September 08, 2003 3:59 AM JP> Subject: RE: [Declude.Virus] SoBig more prolific now? >> > were sent to a single address on my domain at the rate of about 1 per >> > minute. Does anyone know how fast it sends? Does it have anything to >> > do with the speed of the infected computer? I'm just curious. >> >> I think it depends on the speed of the internet connection, and if it is >> fast enough, from the speed of the PC. >> >> Hermann >> >> --- >> [This E-mail was scanned for viruses by Declude Virus JP> (http://www.declude.com)] >> >> --- >> This E-mail came from the Declude.Virus mailing list. To >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >> type "unsubscribe Declude.Virus". The archives can be found >> at http://www.mail-archive.com. >> --- >> [This E-mail scanned for viruses by Declude Virus] >> >> JP> --- JP> [This E-mail scanned for viruses by Declude Virus] JP> --- JP> [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] JP> --- JP> This E-mail came from the Declude.Virus mailing list. To JP> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and JP> type "unsubscribe Declude.Virus". The archives can be found JP> at http://www.mail-archive.com. Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] --- The Family Entertainment Network eFax : 240-376-7272 Phone : 620-231-7777 Fax : 620-231-4066 Online Store http://www.fament.com/catalog/ - Your Full Time Professionals - -- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
