RE: [cobalt-users] spam exploits

["Dan Kriwitsky" <list1@xxxxxxxxxxxxxxxxxxxx>]

{Please reply inline for easier reading}

> > So I see that relay=66.159.211.69 is the culprit?
> 
> Sure looks like it. You shouldn't have opened up an entire 
> /24 to relay.
>
> By saying /24, do you mean port 24?
> 

A /24 is 66.15.211.0/24 meaning 66.15.211.0 - 66.15.211.255

> 
> If so, looks like I have a little work to do re: blocking 
> various IP/domains...the "for a list of know spammers have a 
> look at bruces site blocked.txt" looks 
> like a good start as a reference.

You may wish to just block based on one of the DNSBL lists. While
blocking based on that list may stop some spam, the spammers jump from
ISP to ISP and their IPs change all the time. See
http://list.cobalt.com/pipermail/cobalt-users/2001-November/059954.html
-- 
C2003 Dan Kriwitsky

Please reply to the list only. Off list replies are not read.