Hi Peter,
We have an in-house anti-{virus,spam} freeware package called mailscanner
(www.mailscanner.info).
We would be very interested to add subnet (prefix) filtering to this
for IPv6-format addresses. While mailscanner can (obviously) run
IP-independent when running with sendmail (for example) it cannot look
up directly to black-list databases over IPv6 (though it can if on a
dual-stack system).
I've copied the author. The code tweak will depend on where sendmail
(if you use it with sendmail) does the IP lookup and the format used.
It would be nice to specify, say, a block on 3ffe:dead:beef:0080::/64
blocking any IPv6 address beginning 3ffe:dead:beef:0080:.
I think consideration of v4-v6 interop in such systems is an interesting
area...
BTW, Julian has integrated SpamAssassin into mailscanner - very nice
utility :-)
Tim
On Sun, 3 Feb 2002, Peter Bieringer wrote:
> Hi,
>
> sure, not much IPv6-enabled SMTP servers already around the world but
> the number will hopefully grow in the future.
>
> And because spammers always found a way to send e-mails I think
> something like ordb or similar should be extended for IPv6, too.
>
> Two cases should be catched:
>
> 1) 6to4 addresses
> Two possiblities
> a) extract the IPv4 address and check them against current IPv4-only
> databases
>
> b) see next
>
>
> 2) other global addresses
> check against an IPv6-enabled database, which should have the
> capability to block full /64 or lower prefix lengths and use a
> positive list.
>
> Blocking networks is is hard, but otherwise a spammer could easily
> change his client address (possibility ~ 2^46 minor reserved ones
> using EUI-64 based IID).
>
> Comments?
>
> If this would be also an interesting issue for maillist "ipng", pls.
> forward.
>
> Peter
>
>
>
> ---------------------------------------------------------------------
> The IPv6 Users Mailing List
> Unsubscribe by sending "unsubscribe users" to [EMAIL PROTECTED]
>
---------------------------------------------------------------------
The IPv6 Users Mailing List
Unsubscribe by sending "unsubscribe users" to [EMAIL PROTECTED]
