JP2003229910A - Router and spam traffic decreasing method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To protect the normal operation of an IP network by improving the quality of services of a user by eliminating the distribution of unwanted mails to the user, and decreasing the spam traffic of the IP network. <P>SOLUTION: A user desiring the exclusion of the unwanted mails is registered in advance, the delivery of mails addressed to this registered user is held for a fixed time, caller addresses contained in mails returned because of the unclear destination during this holding period are recorded. Then, mails having the recorded caller addresses are counted out of the held mails addressed to the user and when the counted result exceeds a threshold, the held mails having the caller address and addressed to the user are discarded. The caller addresses of the discarded mails are recorded and the mails having such recorded caller addresses are discarded afterwards. The caller addresses of the discarded mails are recorded and these recorded caller addresses are reported to the other router. <P>COPYRIGHT: (C)2003,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a technique for eliminating junk mail that is generated by randomly generating a destination address and is sent.

[0002]

2. Description of the Related Art There are illegal traders who generate a large amount of mail by generating random destinations, and the user automatically receives these mails, which causes a problem of being charged. Furthermore, there is a problem that a huge amount of spam traffic generated by unsolicited emails interferes with the normal operation of the IP network. FIG. 4 is a diagram for explaining spam traffic generated by unwanted mail.

First, an illegal trader sends a large amount of mail while generating random destinations from his terminal. IP
In the router of the network, the received mail is delivered according to the destination, but most of the mails have unknown destinations, and they are returned to the sender, the illegal trader. However, the mail may be delivered to the address of a real user by chance.

An illegal trader extracts and records the destination of a mail that is accidentally delivered to a real user's destination and is not returned. Repeatedly send e-mail to the recorded address.

As a method of eliminating such unsolicited e-mail, an injured user can register in advance the sending address of an illegal trader in the IP network so that the user does not receive the incoming mail.

[0006]

In such a conventional method for eliminating junk mail, an illegal trader changes a sending address and sends a mail, so that a junk mail will arrive again and again after a while.

Further, the amount of spam traffic generated by sending and receiving such unsolicited e-mail is enormous and may impair the functioning of a normal network. Therefore, an edge router of an IP network directly connected to an illegal operator is required. Although it is desirable to prevent such spam traffic, conventionally, a spam filter is often removed by a router near the user, and the structure of preventing the inflow of spam traffic into the IP network is not complete.

The present invention has been made against such a background. It is possible to improve the quality of service to users by eliminating the delivery of unsolicited emails to users, reduce the spam traffic of the IP network, and An object of the present invention is to provide a router, a program and a recording medium capable of protecting the normal operation of the network, and a spam traffic elimination method.

[0009]

The first aspect of the present invention is to:
It is a router applied to an IP network in which a sender of unsolicited e-mail, which randomly generates destinations and sends a large amount of e-mail, may be connected.

Here, a feature of the present invention is that a user registration unit in which a user who desires to eliminate junk mail is registered and delivery of mail addressed to the user registered in this user registration unit is held for a certain period of time. Means for recording, the means for recording the sending address included in the mail returned with an unknown address during the holding period by the holding means, and the recording from among the mails for the user held by the holding means. Means for counting the number of e-mails having the transmission address recorded by the means, and when the counting result of the counting means exceeds a threshold value, it is addressed to the user who is suspended in the suspension means having the transmission address. It is equipped with a means to discard mail.

Further, it is desirable to have means for recording the transmission address of the mail discarded by the discarding means, and means for discarding the mail having the transmission address recorded in the recording means thereafter.

Further, it is desirable to provide means for notifying the other router of the transmission address recorded in the recording means.

According to this, the user who has been annoyed by the junk e-mail says that he wants to eliminate the junk e-mail addressed to himself.
Notify the administrator of the P network. At this time, for example, the sender address of the junk mail may be unknown. The router autonomously determines whether or not the mail addressed to the registered user is unsolicited mail, and if it is determined to be unsolicited mail, does not deliver it to the user.

Further, by notifying other routers of the source address of the junk mail found in one router, I
All routers in the P network can share the information of the junk mail sending address, and the junk mail can be eliminated in the entire IP network. Therefore, the edge router to which the sender of the junk mail is connected can eliminate the spam traffic from the sender of the junk mail, so that the inflow of the spam traffic to the IP network can be blocked in the immediate vicinity of the source of the spam traffic. Yes, IP with spam traffic
The adverse effect on the net can be minimized.

As a result, it is possible to improve the quality of service to the user by eliminating the delivery of unsolicited emails to the user, reduce the spam traffic of the IP network, and protect the normal operation of the IP network.

[0016] Alternatively, a first aspect of the present invention is a router applied to an IP network in which a sender of unsolicited e-mail, which randomly generates a destination and sends a large amount of e-mail, may be connected.

Here, the feature of the present invention is that the sender registration means in which the sender address of the sender of the already-known junk mail is registered, and means for holding the delivery of the mail for a certain period of time. A means for determining whether the destination address of the mail held by the holding means belongs to a user who has a contract with the IP network, and the destination address of the mail is the IP address according to the determination result of the determining means. If the user is a non-contract user with the network, the sending address is recorded as the mail whose address is unknown and a means for counting the number of unknown addresses corresponding to the sending address and the counting result of this counting means set a threshold value. If it exceeds, the sender address is additionally registered in the sender registration means, and the destination address of the mail is determined by the determination result of the determination means. Even if the address is that of a user who has a contract with the IP network, if the sender address of the mail is registered in the sender registration means, a means for discarding the mail from the holding means is provided. is there.

Further, it is desirable to have means for notifying the other router of the source address additionally registered by the additional registration means.

According to this, the user does not need to make an unwanted e-mail rejection contract with the IP network, and the router autonomously determines whether all e-mails are unsolicited e-mails. If this is discarded, Further, by notifying other routers of the sender address of the junk mail found in one router, the information of the junk mail sender address can be shared by all routers in the IP network.
Junk mail can be eliminated in the entire network. Therefore, the edge router to which the sender of the junk mail is connected can eliminate the spam traffic from the sender of the junk mail, so that the inflow of the spam traffic to the IP network can be blocked in the immediate vicinity of the source of the spam traffic. Therefore, the adverse effect of spam traffic on the IP network can be minimized.

As a result, it is possible to improve the quality of service to the user by eliminating the delivery of unsolicited emails to the user, reduce the spam traffic of the IP network, and protect the normal operation of the IP network.

According to a second aspect of the present invention, by installing it in an information processing device, a sender of unsolicited mail which randomly generates a destination and sends a large amount of mail can be connected to the information processing device. It is a program that realizes a function corresponding to a router applied to a flexible IP network.

Here, the features of the present invention are that a user registration function for registering a user who wishes to eliminate junk mail and delivery of mail addressed to the user registered in this user registration function are suspended for a certain period of time. The function, the function of recording the sending address included in the mail returned by an unknown address during the hold period by the holding function, and the function of recording from the mail held by the holding function for the user A function for counting the number of mails having the sending address recorded by the function, and a mail addressed to the user held in the holding function having the sending address when the counting result of the counting function exceeds a threshold value And the function of discarding.

Further, it is desirable to realize a function of recording the transmission address of the mail discarded by the discarding function and a function of discarding the mail having the transmission address recorded in the recording function thereafter.

Furthermore, it is desirable to realize a function of notifying another router of the transmission address recorded in the recording function.

Alternatively, a second aspect of the present invention is that, when installed in an information processing device, a sender of unsolicited mail which randomly generates a destination and sends a large amount of mail is connected to the information processing device. I have the possibility to
It is a program that realizes the function corresponding to the router applied to the P network.

Here, the features of the present invention are a sender registration function for registering the sender address of a sender of an already-known junk mail, a function for holding mail delivery for a certain period of time, The function of determining whether the destination address of the mail held by the holding function belongs to the user who has a contract with the IP network, and the destination address of the mail is the I
If the user is a non-contract user with the P network, the function is to record the outgoing address as the unknown email and to count the number of unknown emails corresponding to the outgoing address, and the counting result of this counting function is a threshold value. Even if the destination address of the mail is that of a user who has a contract with the IP network according to the function of additionally registering the transmission address to the sender registration function when the number exceeds If the sender address is registered in the sender registration function, the function of discarding the mail from the function of holding the mail is realized.

Further, it is desirable to realize a function of notifying another router of the source address additionally registered by the additional registration function.

A third aspect of the present invention is a recording medium readable by the information processing device, in which the program of the present invention is recorded. By recording the program of the present invention on the recording medium of the present invention, the information processing apparatus can install the program of the present invention using this recording medium. Alternatively, the program of the present invention can be installed in the information processing apparatus directly from a server holding the program of the present invention via a network.

As a result, the information processing device such as a computer device can improve the quality of service to the user by eliminating the delivery of unsolicited emails to the user, reduce the spam traffic of the IP network, and normalize the IP network. It is possible to realize a router that can protect various operations.

A fourth aspect of the present invention is a method for reducing spam traffic applied to a router of an IP network having a possibility that a sender of unsolicited e-mail, which randomly generates a destination and sends a large amount of e-mail, may be connected. Is.

Here, the feature of the present invention is that a user who wishes to eliminate junk mail is registered in advance, the delivery of mail to the registered user is suspended for a certain period of time, and during this suspension period. The outgoing address included in the email returned with unknown destination is recorded in, and the number of emails with the recorded outgoing address among the held emails to the user is counted, and this counting result is set as a threshold value. When it exceeds, the pending mail addressed to the user having the sending address is discarded.

Further, it is desirable to record the origination address of the discarded mail and to discard the mail having the recorded origination address thereafter.

Further, it is desirable to record the transmission address of the discarded mail and notify the recorded transmission address to other routers.

Alternatively, a fourth aspect of the present invention is spam traffic applied to a router of an IP network having a possibility that a sender of unsolicited e-mail, which randomly generates addresses and sends a large amount of e-mail, may be connected. It is a reduction method.

Here, the feature of the present invention is that the sender address of the already known sender of the unwanted mail is registered in advance, the mail delivery is suspended for a certain period of time, and the suspended mail is retained. Whether the destination address of the mail belongs to a user who has a contract with the IP network, and if the destination address of the mail belongs to a non-contract user with the IP network, the mail is sent to the destination. The outgoing address is recorded as an unknown email, and the number of unknown recipient addresses is counted in correspondence with the outgoing address.If this counting result exceeds a threshold value, the outgoing address is additionally registered as the sender of the unsolicited email, and the result of the above determination results Even if the destination address of the mail is that of a user who has a contract with the IP network, the sender address of the mail is a spam mail. There is to be discarded the e-mail that is pending if it is registered as Demoto.

Further, it is desirable to notify other routers of the transmission address additionally registered as the sender of the junk mail.

[0037]

BEST MODE FOR CARRYING OUT THE INVENTION (First Embodiment) A router according to a first embodiment of the present invention will be described with reference to FIGS. FIG. 1 is a block diagram of the router of the first embodiment. FIG. 2 is a flowchart showing the operation of the router of the first embodiment.

The first embodiment is a router applied to an IP network in which a sender of unsolicited e-mail, which randomly generates a destination and sends a large amount of e-mail, may be connected.
The router uses the switch 2 to transfer mail and other data.

Here, the feature of this embodiment is that
A user address table 1-2 in which a user who desires to eliminate junk mail is registered, and delivery of mail addressed to the user registered in this user address table 1-2 is suspended for a certain period set by a timer 1-4. A mail buffer unit 3, a transmission / reception control unit 1 that records a sending address included in a mail returned with an unknown destination during the hold period by the mail buffer unit 3, and a mail buffer unit 3 for the user who is held And a counter 1-3 for counting the number of mails having the transmission address recorded by the transmission / reception control unit 1 from among the mails, and the transmission / reception control unit 1 determines when the count result of the counter 1-3 exceeds a threshold value. The mail for the user, which is held in the mail buffer unit 3 having the transmission address, is discarded.

Further, a discard registration table 1-which records the sending address of the mail discarded by the transmission / reception control unit 1
1, the transmission / reception control unit 1 includes the discard registration table 1-1.
The mail having the sending address recorded in (2) will be discarded thereafter.

Further, the transmission / reception setting unit 1 notifies other routers of the transmission address recorded in the discard registration table 1-1.

Next, the operation of the router of the first embodiment will be described with reference to FIG. First, when the user makes a contract with the IP network administrator so as not to receive unsolicited e-mail that is randomly generated and sent to the IP network administrator, the IP network administrator uses the transmission / reception control unit 1 of the router in which the user is accommodated. The IP address of this user is registered in the user address table 1-2.

When the router receives the mail, the transmission / reception control unit 1 checks whether or not the content of the received mail is a mail indicating an unknown destination (step 1). If the mail is not an unknown address, it is then checked in the user address table 1-2 whether or not the destination address (hereinafter abbreviated as DA) belongs to the user who has the unwanted e-mail rejection contract (step 2), and the user's address table 1-2 If the address is registered, it is then checked whether or not the sending address of this mail (hereinafter abbreviated as SA) is registered in the discard registration table 1-1 (step 3). If the email has the SA registered in the discard registration table 1-1, this email is discarded (step 4). If the SA is not registered in the discard registration table 1-1, the timer 1-holds for holding for a certain period of time.
4 is started (step 5), and this mail is sent to the mail buffer unit 3 (step 6). In step 1, if the address is an unknown mail, the counter 1-3 provided for each SA is added (step 9), and it is checked whether this counter value exceeds a predetermined threshold value, for example, 50 times (step 10). ), If it exceeds, the mail containing this SA is searched from the mail buffer unit 3, all the corresponding mails are discarded (step 11), and this SA is registered in the discard registration table 1-1 (step 12).

In step 2, if the DA of the received mail is not of the user who has the junk mail elimination contract,
This mail is sent as it is (step 8). Further, the mail held in the mail buffer unit 3 and not discarded until the timer expires is transmitted as it is via the switch 2 when the timer expires (step 7).

If the counter value exceeds the predetermined threshold value in step 10, this router also contacts other routers in the IP network, and steps 11 and 12 are executed.
By performing the operation of, it is possible to eliminate all unsolicited e-mails that are randomly generated and transmitted in the IP network. Particularly, since the edge router directly connected to the illegal trader can block the spam traffic, the adverse effect of the spam traffic on the IP network can be minimized.

(Second Embodiment) A router according to a second embodiment of the present invention will be described with reference to FIGS. 1 and 3. FIG. 3 is a flowchart showing the operation of the router of the second embodiment. The block configuration of the router of the second embodiment is the same as that of the first embodiment shown in FIG. However, in the first embodiment, in the user address table 1-2, in addition to the addresses of the users who have a normal connection contract with the IP network, there are also the users who have a junk mail exclusion contract with the IP network. Although the address is recorded, in the second embodiment, the junk e-mail exclusion contract is not necessary, and the user address table 1-2 simply shows the I
The address of the user who has a normal connection contract with the P network is recorded.

The second embodiment is a router applied to an IP network having a possibility that a sender of unsolicited e-mail, which randomly generates a destination and sends a large amount of e-mail, is connected.
The router uses the switch 2 to transfer mail and other data.

Here, the feature of the second embodiment is that the discard registration table 1-1 in which the sender address of the already known sender of the junk mail is registered,
Mail buffer unit 3 that holds mail delivery for a certain period of time
And a transmission / reception control unit 1 that determines whether the destination address of the mail held in the mail buffer unit 3 belongs to a user who has a contract with the IP network, and The destination address of the mail is the I
If the user is a non-contracted user with the P network, the transmission / reception control unit 1 is provided with a counter 1-3 that records the outgoing address of the email as an unknown destination email and counts the number of unknown destination emails corresponding to the outgoing address. Is counter 1
When the count result of -3 exceeds the threshold value, the transmission address is additionally registered in the discard registration table 1-1, and the destination address of the mail is that of the user who has a contract with the IP network according to the determination result. Also, if the sending address of the mail is registered in the discard registration table 1-1, the mail is discarded from the mail buffer unit 3.

Further, the transmission / reception control unit 1 notifies the other router of the transmission address additionally registered in the discard registration table 1-1.

Next, the operation of the router of the second embodiment will be described with reference to FIG. When the router receives the mail, the transmission / reception control unit 1 starts the timers 1-4 (step 11) and holds the received mail in the mail buffer unit 3 (step 12). After that, it is checked by referring to the user address table 1-2 whether or not the content of the received mail is addressed to the user who has the connection contract with the IP network (step 13). If the address of the user is registered in the user address table 1-2, then it is checked whether or not the sender address of this mail (hereinafter abbreviated as SA) is registered in the discard registration table 1-1 (step 1
4). If the email has the SA registered in the discard registration table 1-1, this email is discarded (step 15). If the SA is not registered in the discard registration table 1-1, the mail is delivered after the hold time expires (step 16).

In step 13, if the mail is addressed to the non-contracted user with the IP network, the counter 1-3 provided for each SA is incremented (step 17), and this counter value is a predetermined threshold value, for example 50 times. Is checked (step 18), and if it is exceeded, a mail containing this SA is searched from the mail buffer section 3, all the corresponding mails are discarded (step 19), and this SA is discarded registration table 1- 1 is additionally registered (step 20).

If the counter value exceeds the predetermined threshold value in step 18, this router also contacts other routers in the IP network, and steps 19 and 20 are performed.
By performing the operation of, it is possible to eliminate all unsolicited e-mails that are randomly generated and transmitted in the IP network. Particularly, since the edge router directly connected to the illegal trader can block the spam traffic, the adverse effect of the spam traffic on the IP network can be minimized.

(Third Embodiment) The routers of the first and second embodiments of the present invention can be realized by a computer device which is an information processing device. That is, when installed in a computer device, there is a possibility that a sender of unsolicited mail that randomly generates a destination and sends a large amount of mail is connected to the computer device.
A program that realizes a function corresponding to a router applied to a P network, and a user registration function corresponding to a user address table 1-2 for registering a user who desires to eliminate junk mail, and registration in this user registration function. Function corresponding to the mail buffer unit 3 for holding the delivery of the mail addressed to the user for a certain period of time, and transmission / reception control for recording the sending address included in the mail returned with an unknown address during the holding period by the mail buffer unit 3 Corresponding to the function corresponding to the section 1 and the counter 1-3 for counting the number of mails having the transmission address recorded by the transmission / reception control section 1 among the mails for the user held in the mail buffer section 3. As a function corresponding to the transmission / reception control unit 1 when the count result of the counter 1-3 exceeds the threshold value. By installing in the computer device a program that realizes the function of discarding the mail addressed to the user that is held in the mail buffer unit 3 having the transmission address, the computer device becomes a device corresponding to the router of the first embodiment. can do.

Further, as functions corresponding to the transmission / reception control unit 1, a function corresponding to the discard registration table 1-1 for recording the sender address of the discarded mail and a sender address recorded in the discard registration table 1-1. A function of discarding a mail having the following will be realized.

Further, as a function corresponding to the transmission / reception control unit 1, a function of notifying other routers of the transmission address recorded in the discard registration table 1-1 is realized.

Alternatively, by being installed in a computer device, the computer device is applied to an IP network in which a sender of unsolicited mail that randomly generates a destination and sends a large amount of mail may be connected. It is a program that realizes the function corresponding to the router, and the sender registration function corresponding to the discard registration table 1-1 that registers the sender address of the sender of the already known junk mail, and the mail delivery are fixed. The function corresponding to the mail buffer unit 3 that holds time and the destination address of the mail held in this mail buffer unit 3 are
A function corresponding to the transmission / reception control unit 1 for determining whether or not the user is a connection contract user with the P network, and this transmission / reception control unit 1
The destination address of the mail is the IP
If the user is a non-contract user with the network, the e-mail is recorded as the e-mail whose destination is unknown and the function is equivalent to the counter 1-3 for counting the number of unknown e-mails corresponding to the e-mail. Control unit 1
Is a function of additionally registering the transmission address in the discard registration table 1-1 when the count result of the counter 1-3 exceeds a threshold value, and the destination address of the mail is that of the contract user with the IP network according to the determination result. Even if the sending address of the mail is registered in the discard registration table 1-1, a program for realizing the function of discarding the mail from the mail buffer unit 3 is installed in the computer device, thereby Can be a device corresponding to the router of the second embodiment.

Further, as a function corresponding to the transmission / reception control unit 1, a function of notifying other routers of the source address additionally registered by the additional registration function is realized.

By recording the program of this embodiment on the recording medium of this embodiment, the computer device can install the program of this embodiment using this recording medium. Alternatively, the program of this embodiment can be directly installed in a computer device from a server holding the program of this embodiment via a network.

As a result, the computer device can improve the quality of service to the user by eliminating the delivery of the unwanted mail to the user, reduce the spam traffic of the IP network, and protect the normal operation of the IP network. Can realize a router that can.

[0060]

As described above, according to the present invention,
By eliminating the delivery of unsolicited emails to users, it is possible to improve the quality of service to users, reduce spam traffic on the IP network, and protect the normal operation of the IP network.

[Brief description of drawings]

FIG. 1 is a block configuration diagram of routers according to first and second embodiments.

FIG. 2 is a flowchart showing the operation of the router of the first embodiment.

FIG. 3 is a flowchart showing the operation of the router of the second embodiment.

FIG. 4 is a diagram for explaining spam traffic generated by spam mail.

[Explanation of symbols]

1 Transmission / reception control unit 1-1 Disposal registration table 1-2 User address table 1-3 counter 1-4 timer 2 switches 3 Mail buffer section

   ─────────────────────────────────────────────────── ─── Continued front page    (72) Inventor Masaru Katayama             2-3-1, Otemachi, Chiyoda-ku, Tokyo             Inside Telegraph and Telephone Corporation (72) Inventor Kohei Shiomoto             2-3-1, Otemachi, Chiyoda-ku, Tokyo             Inside Telegraph and Telephone Corporation F-term (reference) 5K030 GA13 GA17 HA06 LC15

Claims (16)

[Claims] 1. A user who applies an IP (Internet Protocol) network in which a sender of unsolicited e-mail, which randomly generates a destination and sends a large amount of e-mail, may be connected, and who desires to eliminate unsolicited e-mail. Registered user registration means, means for suspending delivery of mail to users registered in this user registration means for a certain period of time, and transmission included in emails returned with unknown destination during the hold period by this holding means Means for recording an address, means for counting the number of mails having the origination address recorded by the means for recording from mails for the user held by the means for holding, and means for counting And a means for discarding the mail to the user, which is held in the holding means having the transmission address, when the counting result of A router characterized by having it. 2. The method according to claim 1, further comprising means for recording a sending address of a mail discarded by the discarding means, and means for subsequently discarding a mail having the sending address recorded in the recording means. Router. 3. The router according to claim 1, further comprising means for notifying another router of the transmission address recorded in the recording means. 4. The method is applied to an IP network in which a sender of unsolicited e-mail, which randomly generates destinations and sends a large amount of e-mail, may be connected. The sender registration means in which the address is registered, the means for holding the mail delivery for a certain period of time, and whether the destination address of the mail held in this holding means belongs to the user who has a contract with the IP network. If the destination address of the mail is that of a non-contracted user with the IP network according to the determination result of Correspondingly, means for counting the number of unidentified mails, and when the counting result of this counting means exceeds a threshold value, the sender address is registered as the sender. The means for additional registration, and the determination result of the determination means, even if the destination address of the mail is that of a user who has a contract with the IP network, the sender address of the mail is registered in the sender registration means. And a means for discarding the mail from the holding means, if any. 5. The router according to claim 4, further comprising means for notifying another router of the source address additionally registered by the additional registration means. 6. An application to an IP network having a possibility of being connected to a sender of unsolicited e-mail that generates a large number of e-mails by randomly generating destinations by installing the e-mail in the information processing device. In the program that realizes the function corresponding to the router, the user registration function that registers the user who wants to eliminate junk mail and the function that suspends the delivery of the mail addressed to the user registered in this user registration function for a certain period of time. , By the function to record the sending address included in the mail returned by unknown address during the hold period by this hold function, and the function to record from the mail for the user held in the hold function A function to count the number of emails having the recorded sending address, and if the counting result of this counting function exceeds a threshold value. Program for causing and a function of discarding the mail of the addressed user being held in the function of the hold with the originating address in. 7. The function according to claim 6, wherein a function of recording a sending address of a mail discarded by the discarding function and a function of subsequently discarding a mail having a sending address recorded in the recording function are realized. Program of. 8. The program according to claim 6, which realizes a function of notifying another router of a transmission address recorded in the recording function. 9. Application to an IP network having a possibility that a sender of unsolicited e-mail, which generates a large number of e-mails by randomly generating destinations, can be connected to the information processing device by installing it in the information processing device. In the program that realizes the function corresponding to the router, the sender registration function that registers the sender address of the sender of the already known junk e-mail, the function that suspends the mail delivery for a certain period of time, and this suspension A function to determine whether or not the destination address of the mail held by the function belongs to a user who has a contract with the IP network, and the destination address of the mail is determined to correspond to the IP network according to the determination result of this determination function. If the user is a non-contract user, the sender's address is recorded as the above-mentioned email with unknown recipient address, and it is addressed to the sender's address. A function to count the number of unknown mails, a function to additionally register the sender address to the sender registration function when the count result of this counting function exceeds a threshold, and a destination address of the mail according to the judgment result of the judgment function. Is to realize a function of discarding the mail from the holding function if the sender address of the mail is registered in the sender registration function even if the user is a user who has a contract with the IP network. And the program. 10. The program according to claim 9, which realizes a function of notifying another router of the source address additionally registered by the additional registration function. 11. A recording medium readable by the information processing device, in which the program according to claim 6 is recorded. 12. A spam traffic reducing method applied to a router of an IP network in which a sender of unsolicited e-mail, which randomly generates a destination and sends a large amount of e-mail, may be connected. Register the desired user in advance, hold the delivery of mail to this registered user for a certain period of time, record the sending address included in the mail returned by unknown address during this hold period, and hold it Counting the number of mails having the outgoing address recorded among the mails addressed to the user, and discarding the held emails to the user having the outgoing address when the count result exceeds a threshold value. A method for reducing spam traffic characterized by. 13. The method for reducing spam traffic according to claim 12, wherein the sender address of the discarded mail is recorded, and the mail having the recorded sender address is discarded thereafter. 14. The method for reducing spam traffic according to claim 12, wherein the origination address of the discarded mail is recorded and the recorded origination address is notified to another router. 15. A method for reducing spam traffic applied to a router of an IP network in which a sender of unsolicited e-mail, which randomly generates addresses and sends a large amount of e-mail, may be connected, and has already been found. The sender address of the junk e-mail is registered in advance, mail delivery is suspended for a certain period of time, and whether the suspended e-mail destination address belongs to the user who has a contract with the IP network is confirmed. It is determined that the destination address of the mail is the I
If the user is a non-contract user with the P network, the outgoing address is recorded as the unknown email and the number of unknown emails is counted corresponding to the outgoing address. When the count result exceeds the threshold, the outgoing address Is additionally registered as the sender of the junk mail, and the destination address of the mail is I
A method for reducing spam traffic, wherein even if the user is a user who has a contract with the P network, if the sender address of the mail is registered as a sender of the junk mail, the held mail is discarded. 16. The method for reducing spam traffic according to claim 15, wherein the originating address additionally registered as the sender of the junk mail is notified to another router.