?????? #7632 ?????? ???????? SIMS@stalker.com
?? ????: timothy coffey <tc@zeitraum.com>
????: SPAM without end
????: Thu, 01 Feb 2001 16:34:55 +0100
????: (SIMS Discussions) <SIMS@mail.stalker.com>
I keeping getting alot of SPAM mail (90,000 and counting) from the following
IPs:

206.173.243.115
206.173.248.194
206.173.248.45
206.173.248.206
and so on and on and on.

They are trying to use our server for relaying. I checked ORBs and they are
on the DialUp list but I cannot use that list as we have dialup clients that
use providers that are also on the DialUp List. I put the full net block
206.173.0.0 - 206.173.255.255
into our blacklist, sent several mails and heard nothing back.

Several weeks ago when it all started, they were getting the message we do
not relay (as I have the "relay for clients only" option activated). Then (1
week later as the attack persisted) I thought it would also be good to put
the IP in the Blacklist so as not to slow our mail server down (is this
correct?).

Until now I have heard nothing from the offender and the mails keep coming
more than ever. What should I do to totally block these jerks from even
reaching our mail server. Do I need to get our ISP to put up a filter? Or is
there something I can do on my end. Just for the curious, the whois: test I
ran came up with the following results:

---------------------------------------------------------------------------
<whois://206.173.138.78>

Concentric Network Corporation (NETBLK-CONCENTRIC-BLK)
   1400 Parkmoor Avenue
   San Jose, CA 95126-3429
   US

   Netname: CONCENTRIC-BLK
   Netblock: 206.173.0.0 - 206.173.255.255
   Maintainer: CRC

   Coordinator:
      DNS and IP ADMIN  (DIA-ORG-ARIN)  hostmaster@CONCENTRIC.NET
      (408) 817-2800
Fax- - - (408) 817-2630

   Domain System inverse mapping provided by:

   NAMESERVER3.CONCENTRIC.NET    206.173.119.72
   NAMESERVER2.CONCENTRIC.NET    207.155.184.72
   NAMESERVER1.CONCENTRIC.NET    207.155.183.73
   NAMESERVER.CONCENTRIC.NET    207.155.183.72

   *Rwhois information on assignments from this block available from
   * rwhois.concentric.net 4321
   
   ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
---------------------------------------------------------------------------



Any suggestions would be greatly appreciated!


Timothy Coffey
tc@zeitraum.com

+ + + + + + + + + + + + + + + +
Z E I T R A U M GmbH
Produktion interaktiver Medien
Mainzer Strasse 6
D-66111 Saarbruecken

Fon +49 (0) 681 - 9 38 01-13
Fax +49 (0) 681 - 9 38 01-20

info@zeitraum.com
http://www.zeitraum.com
+ + + + + + + + + + + + + + + +

??????????? (?????) ??????????? (????????) ??????????? (??????????) ?????????? ???????? Listmaster-?