Sudden dropoff in volume of spam

[David Hooton]

> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
> Behalf Of Michael St. Laurent
> Sent: Friday, 9 April 2004 4:24 AM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Sudden dropoff in volume of spam
>
> > 3) An increasingly high percentage of spam received over the last few
> > weeks is from trojaned machines.
>
> Interesting.  How can you tell?

Connecting machines are invariably PC's on broadband connections, don't
accept port 25 connections and looking at multiple copies of the spam itself
will show hugely varied source locations (USA, Europe, Korea, Australia etc)

> > We've recently started using dynamic range blocks on SMTP connect
> > which is why I suspect we're seeing what we are.
>
> Cool!  How are you doing that?  iptables?  hosts.deny?

Sendmail access files.  We've been developing our own files to ensure we are
responsible for and in control of any false positives, however there are
lots of very good RBL's which do the same.

> Thanks for responding Dave.

Not a problem!!

Cheers!

Dave


========================================================================
 Pain free spam & virus protection by:          www.mailsecurity.net.au
 Forward undetected SPAM to:                   spam at mailsecurity.net.au
========================================================================