RE: How to avoide SPAM attack

From: Brian Dennis (bdennis@internetworkexpert.com)
Date: Thu Sep 14 2006 - 14:31:18 ART


But by filtering the evil bit you are assuming that all spam is bad. I
like the spam that I get. Today alone I won two lotteries that I didn't
even enter. On top of that I'm waiting on $4,000,000 from some oil
executive that died in Nigeria to hit my bank account any day now ;-)

Brian Dennis, CCIE #2210 (R&S/ISP-Dial/Security)
bdennis@internetworkexpert.com
 
Internetwork Expert, Inc.
http://www.InternetworkExpert.com
Toll Free: 877-224-8987
Direct: 775-745-6404 (Outside the US and Canada)
 

-----Original Message-----
From: Scott Morris [mailto:swm@emanon.com]
Sent: Thursday, September 14, 2006 10:08 AM
To: Brian Dennis; 'Dennis Morgan'; ccielab@groupstudy.com
Subject: RE: How to avoide SPAM attack

Because we all know that true spam messages have lots of recipients
contained in the MAILTO field. :)

I was thinking that we should simply filter based on the evil bit set
forth by RFC 3514. MQC should allow this I'm sure.

But yes, that's the only reference to spam that I've seen in the IOS
devices. The ASA will bring in a whole slew of other options if you are
working on your security track next year!

 
Scott Morris, CCIE4 (R&S/ISP-Dial/Security/Service Provider) #4713,
JNCIE #153, CISSP, et al.
CCSI/JNCI-M/JNCI-J
IPExpert VP - Curriculum Development
IPExpert Sr. Technical Instructor
smorris@ipexpert.com
http://www.ipexpert.com
 
 

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Brian Dennis
Sent: Thursday, September 14, 2006 12:49 PM
To: Dennis Morgan; ccielab@groupstudy.com
Subject: RE: How to avoide SPAM attack

Look into the IOS Firewall Intrusion Detection System:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/
fsec
ur_c/ftrafwl/scfids.htm#wp1005047

HTH,

Brian Dennis, CCIE #2210 (R&S/ISP-Dial/Security)
bdennis@internetworkexpert.com
 
Internetwork Expert, Inc.
http://www.InternetworkExpert.com
Toll Free: 877-224-8987
Direct: 775-745-6404 (Outside the US and Canada)
 

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Dennis Morgan
Sent: Thursday, September 14, 2006 8:04 AM
To: ccielab@groupstudy.com
Subject: How to avoide SPAM attack

Hi Gang

How do I configure my Router to be aware of a SMTP Mail SPAM attack??

Many Thanks in advance
Dennis



This archive was generated by hypermail 2.1.4 : Sun Oct 01 2006 - 16:55:40 ART