> What is the general concensus on adding IPs to the access list.
> Deny the whole group of addresses (class C) or just the single
> machine?
I think it depends on the reason for blocking them.
For example, if a spammer is relaying through your server, you're dealing with a
denial of service attack. That probably warrants blocking the full class C, as the
spammer would likely see that his mail was being block, would just hang up and dial
again, getting a new IP address. And, if it is a dialup account, you may not need to
worry about adding it back, as very little legitimate E-mail goes through dialup
accounts.
If a spammer is connecting to another mail server and then connecting to you, you may
just want to block the IP address (as it isn't likely that the mail server's IP
address is going to change).
-Scott
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
