RE: Cloud service [was: RE: EC2 and GAE means end of ip address reputation industry? (Re: Intrustion attempts from Amazon EC2 IPs)]

2008-06-24 Thread Frank Bulk - iNAME
8 AM To: [EMAIL PROTECTED] Cc: 'Christopher Morrow'; nanog@nanog.org Subject: Re: Cloud service [was: RE: EC2 and GAE means end of ip address reputation industry? (Re: Intrustion attempts from Amazon EC2 IPs)] > Source IP blocking makes up a large portion of today's spam arr

Re: Cloud service [was: RE: EC2 and GAE means end of ip address reputation industry? (Re: Intrustion attempts from Amazon EC2 IPs)]

2008-06-24 Thread Ken Simpson
Source IP blocking makes up a large portion of today's spam arrest approach, so we shouldn't discount the CPU benefits of that approach too quickly. I'm not sure where today's technology is in regards for caching the first 1 to 10kB of a sessiononce enough information is garnered to b

RE: Cloud service [was: RE: EC2 and GAE means end of ip address reputation industry? (Re: Intrustion attempts from Amazon EC2 IPs)]

2008-06-23 Thread Frank Bulk - iNAME
ubject: Re: Cloud service [was: RE: EC2 and GAE means end of ip address reputation industry? (Re: Intrustion attempts from Amazon EC2 IPs)] On Mon, Jun 23, 2008 at 10:31 PM, Frank Bulk - iNAME <[EMAIL PROTECTED]> wrote: > Ken: > > Thanks for the info, but that still requires the domai

Re: Cloud service [was: RE: EC2 and GAE means end of ip

2008-06-23 Thread Joel M Snyder
Date: Mon, 23 Jun 2008 20:47:17 -0700 From: Joel Jaeggli <[EMAIL PROTECTED]> Subject: Re: Cloud service [was: RE: EC2 and GAE means end of ip address reputation industry? (Re: Intrustion attempts from Amazon EC2 IPs)] To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Mess

Re: Cloud service [was: RE: EC2 and GAE means end of ip address reputation industry? (Re: Intrustion attempts from Amazon EC2 IPs)]

2008-06-23 Thread Joel Jaeggli
PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: Cloud service [was: RE: EC2 and GAE means end of ip address reputation industry? (Re: Intrustion attempts from Amazon EC2 IPs)] Frank Bulk wrote: Thanks. Even with TLS, the destination port (either 25 or 365) is well-known, right, as is the sour

Re: Cloud service [was: RE: EC2 and GAE means end of ip address reputation industry? (Re: Intrustion attempts from Amazon EC2 IPs)]

2008-06-23 Thread Christopher Morrow
tream isn't going to help your email infra very much :( -Chris > Frank > > -Original Message- > From: Ken Simpson [mailto:[EMAIL PROTECTED] > Sent: Monday, June 23, 2008 5:23 PM > To: nanog@nanog.org > Subject: Re: Cloud service [was: RE: EC2 and GAE means end of ip >

Re: Cloud service [was: RE: EC2 and GAE means end of ip addressreputation industry? (Re: Intrustion attempts from Amazon EC2 IPs)]

2008-06-23 Thread Adrian Chadd
On Tue, Jun 24, 2008, Suresh Ramasubramanian wrote: > Hate to point out the obvious, but ... That isnt "network gear" as such. > > It is an appliance that'll require repointing of MX records Please don't tell my test kit at home; Cisco WCCPv2 redirects TCP/25 as easy as it does TCP/80(*1). No MX

Re: Cloud service [was: RE: EC2 and GAE means end of ip addressreputation industry? (Re: Intrustion attempts from Amazon EC2 IPs)]

2008-06-23 Thread Suresh Ramasubramanian
On Mon, Jun 23, 2008 at 11:14 PM, Tomas L. Byrnes <[EMAIL PROTECTED]> wrote: > Barracuda, or you could build the exact same thing using OSS. > > Procmail, Spamassasin, ClamAV, and your choice of RBLs (or use > karmashpere to custom roll a hybrid one). Hate to point out the obvious, but ... That is

RE: Cloud service [was: RE: EC2 and GAE means end of ip address reputation industry? (Re: Intrustion attempts from Amazon EC2 IPs)]

2008-06-23 Thread Frank Bulk - iNAME
OTECTED] Subject: Re: Cloud service [was: RE: EC2 and GAE means end of ip address reputation industry? (Re: Intrustion attempts from Amazon EC2 IPs)] Frank Bulk wrote: > Thanks. Even with TLS, the destination port (either 25 or 365) is > well-known, right, as is the source IP? And 587 th

RE: Cloud service [was: RE: EC2 and GAE means end of ip address reputation industry? (Re: Intrustion attempts from Amazon EC2 IPs)]

2008-06-23 Thread Frank Bulk - iNAME
PROTECTED] Sent: Monday, June 23, 2008 5:23 PM To: nanog@nanog.org Subject: Re: Cloud service [was: RE: EC2 and GAE means end of ip addressreputation industry? (Re: Intrustion attempts from Amazon EC2 IPs)] > On Mon, Jun 23, 2008 at 6:01 PM, Frank Bulk - iNAME iname.com> wrote: > > Is th

Re: Cloud service [was: RE: EC2 and GAE means end of ip addressreputation industry? (Re: Intrustion attempts from Amazon EC2 IPs)]

2008-06-23 Thread Ken Simpson
On Mon, Jun 23, 2008 at 6:01 PM, Frank Bulk - iNAME iname.com> wrote: > Is there a vendor that makes a product that perform spam/malware filtering > literally in the network, i.e. as a service provider, can I provide spam > filtering for the enterprises in my customer base by adding a piece o

Re: Cloud service [was: RE: EC2 and GAE means end of ip address reputation industry? (Re: Intrustion attempts from Amazon EC2 IPs)]

2008-06-23 Thread Joel Jaeggli
TECTED] Subject: Re: Cloud service [was: RE: EC2 and GAE means end of ip address reputation industry? (Re: Intrustion attempts from Amazon EC2 IPs)] dpi boxes from a number of vendors can do that sort of thing... whether they can do it fast enough to be inline with your compute cloud is another qu

RE: Cloud service [was: RE: EC2 and GAE means end of ip address reputation industry? (Re: Intrustion attempts from Amazon EC2 IPs)]

2008-06-23 Thread Frank Bulk
: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: Cloud service [was: RE: EC2 and GAE means end of ip address reputation industry? (Re: Intrustion attempts from Amazon EC2 IPs)] dpi boxes from a number of vendors can do that sort of thing... whether they can do it fast enough to be inline with

RE: Cloud service [was: RE: EC2 and GAE means end of ip address reputation industry? (Re: Intrustion attempts from Amazon EC2 IPs)]

2008-06-23 Thread Frank Bulk
, June 23, 2008 9:16 AM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: Cloud service [was: RE: EC2 and GAE means end of ip address reputation industry? (Re: Intrustion attempts from Amazon EC2 IPs)] On Mon, Jun 23, 2008 at 6:01 PM, Frank Bulk - iNAME <[EMAIL PROTECTED]> wrote: >

Re: Cloud service [was: RE: EC2 and GAE means end of ip address reputation industry? (Re: Intrustion attempts from Amazon EC2 IPs)]

2008-06-23 Thread Joel Jaeggli
Frank Bulk - iNAME wrote: When I hear "cloud services" I think "in the network" even though it appears all these cloud services perform their work at a data center as an outsourced service. Is there a vendor that makes a product that perform spam/malware filtering literally in the network, i.e.

RE: Cloud service [was: RE: EC2 and GAE means end of ip addressreputation industry? (Re: Intrustion attempts from Amazon EC2 IPs)]

2008-06-23 Thread Tomas L. Byrnes
8 7:16 AM > To: [EMAIL PROTECTED] > Cc: [EMAIL PROTECTED] > Subject: Re: Cloud service [was: RE: EC2 and GAE means end of > ip addressreputation industry? (Re: Intrustion attempts from > Amazon EC2 IPs)] > > On Mon, Jun 23, 2008 at 6:01 PM, Frank Bulk - iNAME > <[EMA

Re: Cloud service [was: RE: EC2 and GAE means end of ip address reputation industry? (Re: Intrustion attempts from Amazon EC2 IPs)]

2008-06-23 Thread Suresh Ramasubramanian
On Mon, Jun 23, 2008 at 6:01 PM, Frank Bulk - iNAME <[EMAIL PROTECTED]> wrote: > Is there a vendor that makes a product that perform spam/malware filtering > literally in the network, i.e. as a service provider, can I provide spam > filtering for the enterprises in my customer base by adding a piec