Spam Blocking with a Dynamically Updated Firewall Ruleset
by Deeann M. M. Mikula, Chris Tracy, Mike Holling
Usenix,
2002-11
Language:
English
Note: Pp. 13-20 of the Proceedings of LISA '02: Sixteenth Systems Administration Conference, (Berkeley, CA: USENIX Association, 2002).
Abstract
In this paper, we detail our methods for controlling spam at a small ISP, reducing both resource usage and customer complaints. We will discuss our initial unsuccessful tactics, and the resulting development of our unique spam blocking system. Deny-Spammers classifies hosts as probable spammers and inserts those hosts into a dynamically updated firewall ruleset on our mail server, thereby effectively blocking the host from making an SMTP connection to our mail server. Our analysis demonstrates that this has been effective in reducing the amount of spam that our customers receive, and the burden on our limited resources.
