In one embodiment, a router inspects at a network layer source addresses
of network layer packets flowing through the router. The router compares
the source addresses to addresses of computers employed by spammers, and
performs a predetermined action on a particular network layer packet
having a source address that belongs to a computer of a spammer. The
predetermined action may involve dropping the particular network layer
packet or limiting the data transfer rate of the particular network layer
packet.