SV: blocking an email based on it's IP

Anders Andersson, IT anders.andersson at LTKALMAR.SE
Mon Sep 1 17:42:03 IST 2003


> -----Ursprungligt meddelande-----
> Från: Spicer, Kevin [mailto:Kevin.Spicer at BMRB.CO.UK] 
> 
> Antony Stone wrote:
> > Genuine emails from that client should go via the client's local (or
> > ISP) mail server first, so you won't end up blocking them.
> > 
> Very true, (unless its an Exchange server thats infected of 
> course!).  Although I'd still advise the subject based 
> blocking, so you block all sobig, not just the current 
> sender.  Also worth noting that many infected machines are on 
> services where they get a dynamic IP.

Any admin letting an exchange get infected should be blocked anyhow... just
my thoughts though 




More information about the MailScanner mailing list