Mail blocking (was: I've had enough. I'm starting a DNS blackhole list.)

[Greg 'groggy' Lehey]

On Wednesday, 24 September 2003 at 17:15:27 -0500, Kirk Strauser wrote:
> Yep, I really am.  From now on, any system that relays a virus-laden email
> to my system is going into a DNS blackhole list serving all of the systems I
> administer.  In a fit of "had it up to here"-ness, I've written the
> following programs today:
>
> ...

On Wednesday, 24 September 2003 at 21:17:26 -0400, Drew Derbyshire wrote:
>> [missing context]
>
> Seems like a lot of work with way too much room for false positives.
>
> Why aren't you running a content filter on executable attachments so they
> get bounced and you never see them?

One reason would be that the traffic is expensive.  I'm on a 2
GB/month plan, after which I pay significantly higher charges.  I'm
currently getting 50 to 60 MB a day just of this mail crap.  Yes, it
all gets dropped (just dropping .exe attachments does it), but that
doesn't stop the traffic.

Greg
--
See complete headers for address and phone numbers
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20030925/b0eb9b11/attachment.bin