On 2004-02-15T20:43-0500, Jon R. Kibler wrote: ) jlewis@lewis.org wrote: ) > On Sun, 15 Feb 2004 Valdis.Kletnieks@vt.edu wrote: ) > > If we block outbound port 25 SYN packets from origin addresses in the DHCP ) > > address blocks, we solve the problem for everybody. ) EXACTLY correct! Not quite exactly, no; perhaps by adding the blocking of incoming ACKs with a source port of 25 might be closer to solving the problem "for everybody". But this is part of my point: There is no simple answer, because spammers will eventually [hire someone to] come up with a technical work around for whatever you do. -- Daniel Reed <n@ml.org> http://naim-users.org/nmlorg/ http://naim.n.ml.org/ "True nobility lies not in being superior to another man, but in being superior to one's previous self."