From: Narbik Kocharians (narbikk@gmail.com)
Date: Sat Sep 16 2006 - 01:49:21 ART
How does an IOS IDS stop SPAMs?
On 9/15/06, Scott Morris <swm@emanon.com> wrote:
>
> If we manage to exceed 250 people in the recipient list, I will be
> impressed! The nice thing about list managers is the suppression of
> detailed MAILTO lists. Otherwise it would mean that lots of people are
> expressing opinions (good idea), but everyone's using Reply All (exceeding
> a
> good idea).
>
> :)
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
> Ivan
> Sent: Friday, September 15, 2006 6:11 AM
> To: ccielab@groupstudy.com; Scott Morris
> Cc: 'Brian Dennis'; 'Dennis Morgan'
> Subject: Re: How to avoide SPAM attack
>
> GroupStudy mail will also be droped as a spam. Long threads has many
> MAILTO
> header field.
> :)
>
> On Thursday 14 September 2006 21:07, Scott Morris wrote:
> > Because we all know that true spam messages have lots of recipients
> > contained in the MAILTO field. :)
> >
> > I was thinking that we should simply filter based on the evil bit set
> > forth by RFC 3514. MQC should allow this I'm sure.
> >
> > But yes, that's the only reference to spam that I've seen in the IOS
> > devices. The ASA will bring in a whole slew of other options if you
> > are working on your security track next year!
> >
> >
> > Scott Morris, CCIE4 (R&S/ISP-Dial/Security/Service Provider) #4713,
> > JNCIE #153, CISSP, et al.
> > CCSI/JNCI-M/JNCI-J
> > IPExpert VP - Curriculum Development
> > IPExpert Sr. Technical Instructor
> > smorris@ipexpert.com
> > http://www.ipexpert.com
> >
> >
> >
> > -----Original Message-----
> > From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf
> > Of Brian Dennis
> > Sent: Thursday, September 14, 2006 12:49 PM
> > To: Dennis Morgan; ccielab@groupstudy.com
> > Subject: RE: How to avoide SPAM attack
> >
> > Look into the IOS Firewall Intrusion Detection System:
> >
> >
> >http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr
> >/fse
> >c ur_c/ftrafwl/scfids.htm#wp1005047
> >
> > HTH,
> >
> > Brian Dennis, CCIE #2210 (R&S/ISP-Dial/Security)
> > bdennis@internetworkexpert.com
> >
> > Internetwork Expert, Inc.
> > http://www.InternetworkExpert.com
> > Toll Free: 877-224-8987
> > Direct: 775-745-6404 (Outside the US and Canada)
> >
> >
> > -----Original Message-----
> > From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf
> > Of Dennis Morgan
> > Sent: Thursday, September 14, 2006 8:04 AM
> > To: ccielab@groupstudy.com
> > Subject: How to avoide SPAM attack
> >
> > Hi Gang
> >
> > How do I configure my Router to be aware of a SMTP Mail SPAM attack??
> >
> > Many Thanks in advance
> > Dennis
> >
> > ______________________________________________________________________
> > _ Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
> >
> > ______________________________________________________________________
> > _ Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
> >
> > ______________________________________________________________________
> > _ Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
>
> --
> Ivan
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
-- Narbik Kocharians CCIE# 12410 (R&S, SP, Security) CCSI# 30832 Network Learning, Inc. (CCIE class Instructor) www.ccbootcamp.com (CCIE Training)
This archive was generated by hypermail 2.1.4 : Sun Oct 01 2006 - 16:55:40 ART