Merit Network
Can't find what you're looking for? Search the Mail Archives.
  About Merit   Services   Network   Resources & Support   Network Research   News   Events   Home

Discussion Communities: Merit Network Email List Archives

North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Interesting new spam technique - getting a lot more popular.

  • From: Patrick W. Gilmore
  • Date: Wed Jun 14 13:58:33 2006

On Jun 14, 2006, at 1:53 PM, Church, Chuck wrote:

Since this technique requires a IPinIP or GRE tunnel, wouldn't blocking
these two protocols to/from the hosts be sufficient? Assuming of course
the customer's host isn't using that normally.
Unfortunately, that probably won't work for very long, if at all.

First, it's kinda difficult to guarantee your customers will not use a protocol.

Second, unless you have deep packet inspection, what is to stop the spammer from using, say, port 80 for their tunnel?

Third, what's to stop them from using SSH tunnels?

Etc., etc., etc....

--
TTFN,
patrick




Discussion Communities


About Merit | Services | Network | Resources & Support | Network Research
News | Events | Contact | Site Map | Merit Network Home


Merit Network, Inc.