Mailing List SIMS@mail.stalker.com Message #15517
From: billc <billc_lists@greenbuilder.com>
Subject: Re: dictionary
Date: Mon, 13 Aug 2007 23:38:24 -0500
To: SIMS Discussions <SIMS@mail.stalker.com>
At 9:17 PM -0500 8/13/07, Lewis Butler wrote:
On Aug 13, 2007, at 9:03 AM, Charles Mangin wrote:
since i took over hosting, all of these dictionary-style spams have been going nowhere, being rejected out of hand with "<<< 550 Unrouteable address". i know i can't do anything more than ignore them and hope they will move on to some other target but... sheesh. six months? with nothing to show for it? you'd think there'd be some sort of list purging in all that time.

Well, you can do something about it, you can blacklist IP addresses that send too many bad messages where too many is a number you chose.

I wish that were true.  Recently the dictionary attacks are coming from completely unrelated IPs - you can sit there and watch the logs roll by and know that it's a dictionary attack, but none of the IPs match any other.  It's obviously a botnet or an IP spoofing scheme. Blacklists likely won't help much there.


--
Bill Christensen
<http://greenbuilder.com/contact/>

Green Building Professionals Directory: <http://directory.greenbuilder.com>
Sustainable Building Calendar: <http://www.greenbuilder.com/calendar/>
Green Real Estate: <http://www.greenbuilder.com/realestate/>
Straw Bale Registry: <http://sbregistry.greenbuilder.com/>
Books/videos/software: <http://bookstore.greenbuilder.com/>
Subscribe (FEED) Subscribe (DIGEST) Subscribe (INDEX) Unsubscribe Mail to Listmaster