This is a good point.Its best to ban only the IPs used by the spammer.Now a days ISPs are requiring justifying IP allocations, they're less likely to hand out a /24 just because you want one. If you arbitrarily block a /24 without researching how much of it is actually controlled by the spammer you run the risk of blocking legitimate servers.
There are several spam databases that will list /24 ranges, and several of our customers have been in those spam databases just because they were "near" the spammers.
Although this could work well in theory (the theory being that the innocent victim will contact their ISP to get rid of the spammers), it doesn't work well in practice (it essentially lets the spammers win by causing legitimate mail to get caught, which costs the good people even more money).
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches both viruses and vulnerabilities in E-mail, with no annual licensing fees.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
