|
[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]
|
Re: [PLUG] while we're talking about spam, a novel idea
|
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Feb 13, 2005, at 11:47 PM, sean finney wrote:
an observation:
i've noticed that spammers typically follow the opposite of convention
wrt mx records for a domain. while reasonable mta's will pick
the mx with the lowest value, spammers will typically start from the
other end, as backup mx's usually have less anti-spam/anti-virus
protections in place and will often blindly circumvent the systems
found on the primary.
so, i have this idea in my head that involves creating a tertiary (or
whateverenary) mta with even higher mx value. this server would only
return status 452 errors on every connection attempt.
my guess is that over time, the bulk of the spammers out there would
shift to trying to send mail through this server. folks who for some
reason ended up accidentally talking to the mta would get a
greylist-like
temporary error, while spammers would probably forget and move on,
or at best repeatedly get the same temporary error.
ideas, comments?
RoboMail and SendSafe, the two most popular pieces of spamware out
there, already can deal with this technique and others like it quite
nicely. As well, you run the risk of bouncing legitimate mail if the
user's MTA/MUA is crappy.
- --
Tobias DiPasquale
7A79 308C 0354 EA9C 7807 ED83 03C9 9E01 148E 7D01
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (Darwin)
iD8DBQFCEIwrA8meARSOfQERAth5AKCjxo+fyOOuMfZV4XrQVhjWIrdmTwCfQwZz
A34lGT/Og858SuDzSWNsdSM=
=wQQt
-----END PGP SIGNATURE-----
___________________________________________________________________________
Philadelphia Linux Users Group -- http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug
|
|