[Declude.JunkMail] Interesting SMTP connection patterns

2006-10-12 Thread Dave Beckstrom
Yesterday I took a snapshot of the SMTP connections active on our server. I then did a reverse IP to find out where they were from. Below are the results. You can see someone from Thailand had 5 SMTP connections active and Spain had 4. You can also see that only 3 of the IPS connected were for

Re: [Declude.JunkMail] Interesting SMTP connection patterns

2006-10-12 Thread Darrell \([EMAIL PROTECTED])
Dave, That is really not that uncommon. I see this with very aggressive spammers who are trying to get the most spam through in the least amount of time and have no disregard for crashing the server they are sending spam to... Darrell --- Check out

RE: [Declude.JunkMail] Interesting SMTP connection patterns

2006-10-12 Thread Craig Edmonds
] On Behalf Of Dave Beckstrom Sent: Thursday, October 12, 2006 11:24 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Interesting SMTP connection patterns Yesterday I took a snapshot of the SMTP connections active on our server. I then did a reverse IP to find out where they were from

RE: [Declude.JunkMail] Interesting SMTP connection patterns

2006-10-12 Thread Jay Sudowski - Handy Networks LLC
] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Beckstrom Sent: Thursday, October 12, 2006 11:24 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Interesting SMTP connection patterns Yesterday I took a snapshot of the SMTP connections active on our server. I then did a reverse IP to find

RE: [Declude.JunkMail] Interesting SMTP connection patterns

2006-10-12 Thread Dave Beckstrom
: [Declude.JunkMail] Interesting SMTP connection patterns Of course, BlackIce does not support Windows 2003. -Jay -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds Sent: Thursday, October 12, 2006 3:51 PM To: declude.junkmail

RE: [Declude.JunkMail] Interesting SMTP connection patterns

2006-10-12 Thread Dave Beckstrom
: [Declude.JunkMail] Interesting SMTP connection patterns Dave, That is really not that uncommon. I see this with very aggressive spammers who are trying to get the most spam through in the least amount of time and have no disregard for crashing the server they are sending spam to... Darrell

RE: [Declude.JunkMail] Interesting SMTP connection patterns

2006-10-12 Thread Jay Sudowski - Handy Networks LLC
: RE: [Declude.JunkMail] Interesting SMTP connection patterns Blackice runs perfect on Windows 2003 server. I posted the install instructions on this list a couple of weeks ago. Craig -- I believe some email servers will open a secondary connection as part of their spam checking. In that case, you

RE: [Declude.JunkMail] Interesting SMTP connection patterns

2006-10-12 Thread Dave Beckstrom
Networks LLC Sent: Thursday, October 12, 2006 8:46 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Interesting SMTP connection patterns Well, it didn't run for us. We tried and it caused random BSOD and ISS wouldn't provide any support. -Jay -Original Message

Re: [Declude.JunkMail] Interesting SMTP connection patterns

2006-10-12 Thread Matt
:[EMAIL PROTECTED]] On Behalf Of Dave Beckstrom Sent: Thursday, October 12, 2006 7:38 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Interesting SMTP connection patterns Blackice runs perfect on Windows 2003 server. I posted the install instructions on this list a couple of weeks