North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Interesting new spam technique - getting a lot more popular.

  • From: Suresh Ramasubramanian
  • Date: Wed Jun 14 00:40:47 2006
  • Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=nBolKUzvhIDDoU5Wsf1zsGvO8jdUJbAvlSe+uzihLROQpXZ5F7Mj7UfiJs3das1c/kwMbEYAr5SLkdSbXiMYdgdAmGZdVwuEoE7HMW6QptskgPZstuShCzVZZ/CUlK/HBcmU1lESBTXLlPuIY4aL3MRs7VimBMMsljU15b/oHTE=
On 6/14/06, Christopher L. Morrow
<[email protected]> wrote:

Atleast it'd trim down the 'problem' to the single customer subnet, I
assume that dedicated hosting folks don't just drop machines behind a
switch on one big flat subnet? That's probably a naive assumption though
:(  Perhaps this is clue #12 that that is a 'less than good' option? :)

Given the people who complained, and their traditionally spammer
infested nature I wouldnt be surprised at all to find that they've put
all their hosts on a flat subnet

Various  /24s of theirs keep getting complimentary upgrades from our
filters after reaching a certain limit - based on a X IPs blocked per
/24, Y /24s per /16 metric .. when that limit is reached, we
automatically upgrade the blocks to cover infested /24s.