RE: [MLUG] More spam

["Russell Horn" <EMAIL:PROTECTED>]

> I'm not talking about "this email has pr0n in it, delete it", 
> I'm talking about "this address sent over 4000 emails at once 
> into our system, block them".
> 

Most spam we track generates a new from address for every few emails to
stop that happening.

I've also seen spammers try and use our server for a while then go away
then come back - suggests to me that they only use a server for a short
while so there's no huge number of emails from it, before going to a new
server with a new IP and returning later - possibly hoping that their
previous attempts wouldn't have been noticed either.

As such spam is difficult to block unless you, for example banish blocks
of IP - perhaps not accepting email from smtp servers on a dynamic IP
range (i.e. dial up / adsl)  Imagine how many linux users that would
hurt. Or they could use one of the spam black hole lists, but what about
when your mother / sister / son's ISP gets themselves listed and then
you can receive email from your family...

It's a tough nut to crack.

Russell.

_______________________________________________
members mailing list
EMAIL:PROTECTED
http://mlug.missouri.edu/mailman/listinfo/members