nanog mailing list archives
Re: ISP wants to stop outgoing web based spam
From: Peter Corlett <abuse () cabal org uk>
Date: Fri, 11 Aug 2006 09:44:38 +0100
On 11 Aug 2006, at 05:24, Hank Nussbacher wrote: [...]
Please show me which virus scanner scans html pages for the words like V I A G R A, or Free M O R T G A G E, as it is going outbound.
It's the one you're going to have to write, or coerce somebody to write, if you want it that much.
I have a sneaking suspicion that SpamAssassin's core could probably be pressed into action here, wrapped in a HTTP proxy. It wouldn't scale terribly well, but it might be enough to keep tabs on a few tens of hosts that you expect trouble to come from.
HTTPS would be a bit more tricky and would require the co-operation of the cybercafe to install your CA cert on their browsers and crank down the security settings so you could do a MITM attack.
Current thread:
- Re: fingerprinting and spam ID (was: Re: ISP wants to stop outgoing web based spam), (continued)
- Re: fingerprinting and spam ID (was: Re: ISP wants to stop outgoing web based spam) Ken Simpson (Aug 11)
- Re: fingerprinting and spam ID Petri Helenius (Aug 12)
- Re: ISP wants to stop outgoing web based spam Ken Simpson (Aug 11)
- Message not available
- Re: ISP wants to stop outgoing web based spam Ken Simpson (Aug 11)
- Re: ISP wants to stop outgoing web based spam Florian Weimer (Aug 10)
- Re: ISP wants to stop outgoing web based spam Suresh Ramasubramanian (Aug 10)
- Re: ISP wants to stop outgoing web based spam Hank Nussbacher (Aug 10)
- Re: ISP wants to stop outgoing web based spam Simon Waters (Aug 11)
- Re: ISP wants to stop outgoing web based spam Peter Corlett (Aug 11)
- Re: ISP wants to stop outgoing web based spam Barry Shein (Aug 09)
- Re: ISP wants to stop outgoing web based spam Allan Poindexter (Aug 09)