Security Basics mailing list archives

Re: Blocking traffic by Country to reduce spam


From: Guilherme Marconi de Oliveira <gmoliv () gmail com>
Date: Mon, 22 Jun 2009 13:34:35 -0300

Hi Paavan,

Is it the only possibility?

I did it once in a "not so large" company and we had problems with some departments that used to access sites worldwide (marketing, research, etc) while the spam problem was just like the same headache it was before.

We also had problems with some trusted ips and domais... we figured out that they were using routes trough non-USA/non-Brazilian ips (the company had almos all of business in Brazil). After a week our "whitelist" was so huge we decided to use focused methods to keep spam away (a specific solution for each spam source like email, "contact us" in the corporate website, company forum, etc).

As it was almost impossible to get rid of 100% spam messages, we did some training to teach the people there how to use their e-mail client program to classify messages as spam and make a better use of email client's filter.

Hope it helps,

(and sorry by the horrible English, I haven't used if for a long time so I'm kind of rust)

Gmoliv


paavan.shah () gmail com wrote:
Hello List,

One of our clients is based in USA and has most of the business in USA and UK.

To reduce spam we are planning to propose them a solution to filter traffic by country.

We can add IP Blocks for USA and UK as a whitelist and allow only incoming access to those IP Blocks,everything else is 
blocked.

Has anyone implemented this change on their production networks?Has it been effective to reduce spam?

Please share your views and experiences

------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute

Need to pass the CISSP? InfoSec Institute's CISSP Boot Camp in both Instructor-Led and Online formats is the most concentrated exam prep available. Comprehensive course materials and an expert instructor means you pass the exam. Gain a laser like insight into what is covered on the exam, with zero fluff!
http://www.infosecinstitute.com/courses/cissp_bootcamp_training.html
------------------------------------------------------------------------



------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute

Need to pass the CISSP? InfoSec Institute's CISSP Boot Camp in both Instructor-Led and Online formats is the most concentrated exam prep available. Comprehensive course materials and an expert instructor means you pass the exam. Gain a laser like insight into what is covered on the exam, with zero fluff!
http://www.infosecinstitute.com/courses/cissp_bootcamp_training.html
------------------------------------------------------------------------


Current thread: