Hi, I drop all of the spam I receive into a spam folder (currently 2774 entries). When I feel like it, I copy it to a folder on my hard drive.
I wrote a VB script to parse the messages for the IP addresses. It then adds them to an MS Access database (currently 3498 entries and 2-3 months out of date). I wrote another VB script to automatically generate a router filter list that rejected SMTP requests from those IP addresses. I wanted to add: - IP address ignore list (IPs we don't want added regardless, but still count the hits) - DNS lookup to the code - Point system that counts the number of spam messages from an IP address - Netmask logic that would be updated automatically as IP addresses were added to the database I think it needs an aging system from an unfiltered honeypot mail server to automatically remove IP addresses that have not sent spam for some definable time span. I was developing this for local use only. I have no desire to run an open relay/spammer database for others to use. I can tell you that when I was using the filter, it cut down the amount of spam tremendously. The unfortunate part is that we are in AT&T Broadband country and a couple of spammers used an AT&T mail server to relay through. Naturally, that server's IP address made the list and I ended up blocking it. Well, many of my customers could not exchange mail with AT&T customers and/or their own personal accounts. We didn't lose any customers over it, but a lot of them were irritated (said politely). I got irritated (said politely) and pulled the filter. Negatives. I was not happy with the load it placed on the router. I was actually considering placing a router between the mail server and the rest of our network, whose only purpose would be filtering connections to the mail server. If you also keep a spam folder, I could offer the script to generate your own list. I would need to massage it a bit, as I have an IP address ignore list built into the code. Mike ----- Original Message ----- From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, June 03, 2002 3:27 PM Subject: Re: [IMail Forum] ipv4 >I'm in need of help finding a list of ip address of know spammers or porno >mailers. >I've searched the online databases and can't find any valid lists. http://www.declude.com/junkmail/support/ip4r.htm has the list of all known DNS-based spam databases. There are a handful of non-DNS-based spam lists (such as IP lists), but as far as I know, there is no list of them (and, they are very likely out of date). If anyone does know of a list of them, feel free to post a link. -Scott --- Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for IMail. http://www.declude.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit the Knowledge Base for answers to frequently asked questions: http://www.ipswitch.com/support/IMail/ Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit the Knowledge Base for answers to frequently asked questions: http://www.ipswitch.com/support/IMail/
