Re: dealing with virus spewing PCs

John Levine <[email protected]> 29 Feb 2004 04:19:48 -0000
Newsgroups gmane.ietf.asrg.smtpverify
Organization I.E.C.C., Trumansburg NY USA
Message-ID <[email protected]>
>The above "jail" system is not as widely used. More common is simply
>redirection of port25 to main ISP mail server relay and calculating
>how much traffic is coming from specific user/port.

AOL is the only ISP I know of that redirects port 25.  The rest just
block it.  This is true for everyone, viruses or no.

The jail is for hosts that have been observed to be spewing, and keeps
them from doing anything other than looking at "fix your virus" pages.

>Additionally since this has not been documented by IETF it maybe good 
>idea to work towards BCP document for mail setup for ISPs that service 
>dial/dsl/cable customers. It does not mean that ISPs will necessarily 
>follow it, but it might still improve the situation with availability of 
>hijacked PCs.

Sure.  Go ahead.

Regards,
John Levine, [email protected], Taughannock Networks, Trumansburg NY
http://www.taugh.com