Security Basics mailing list archives
Re: Question on Blocking an ISP.
From: "Chris S" <chris () jynx net>
Date: Mon, 02 Dec 2002 14:31:11 -0500
I use Qmail, so i tried using @aol.com in my badmailfrom, but badmail doesnt seem to look deep enough into the headers. These virus that are sent to me and many others on my server are spoofing other peoples address books, so the from: is not aol. Maybe theres another plugin out there for qmail that will check deeply into the headers. This is my next option.
Rick Darsey writes:
Do the email servers all have aol.com in them. If so, and if your firewall can resolve DNS, you should be able to block them aol.com domain. Of course,this will block all traffic, but that seems to be what you are after. Rick-----Original Message----- From: Chris [mailto:chris () jynx net] Sent: Saturday, November 30, 2002 3:21 AM To: security-basics () securityfocus comSubject: Question on Blocking an ISP.As of the last couple weeks, from 1 aol users i have gotten over 1000+ virus emails. These emails are your tipical freescreensaver virus that has been going around for years now. It seems this person has an affected system. This isnot really my question or concern.I have been scanning though all the headers getting the proxy email serversaol uses, but it seems like a endless list. LOL.I'm blocking these ips though IPchains, but i really would like to know howto get every class owned by aol so i can block them all.Receiving mail from aol is no big thing to me, considering 99.9% of the timeis junk or spam. Is there some way to whois arin on a nic handle to get all the classes?Thank you.-chris
Chris S. www.jynx.netchris () jynx net
Current thread:
- Question on Blocking an ISP. Chris (Dec 02)
- RE: Question on Blocking an ISP. Rick Darsey (Dec 03)
- Re: Question on Blocking an ISP. Chris S (Dec 03)
- Re: Question on Blocking an ISP. Brian L. Johnson (Dec 03)
- RE: Question on Blocking an ISP. * KAPIL * (Dec 04)
- Re: Question on Blocking an ISP. Devdas Bhagat (Dec 03)
- Re: Question on Blocking an ISP. Neal K. Groothuis (Dec 03)
- Re: Question on Blocking an ISP. Byrne Ghavalas (Dec 03)
- <Possible follow-ups>
- RE: Question on Blocking an ISP. Robb, Bev (Dec 03)
- Re: Question on Blocking an ISP. Chris S (Dec 03)
- Re: Question on Blocking an ISP. Johannes Ullrich (Dec 03)
- Re: Question on Blocking an ISP. Chris S (Dec 03)
- Re: Question on Blocking an ISP. Steve Payne (Dec 04)
- RE: Question on Blocking an ISP. Allan Jensen (Dec 05)
(Thread continues...)
- RE: Question on Blocking an ISP. Rick Darsey (Dec 03)