Sudden dropoff in volume of spam

[Raymond Dijkxhoorn]

Hi!

> I have submitted and do submit proxies to ORDB and DSBL, we use both lists.
> Problem is that neither of those lists consider most of these as 'open
> proxies' as they are either not REALLY Open (as in we can use them also) or
> simply do not use the ports or mechanisms the main-stream lists use to test on.
>
> A safe bet is that these hijacked machines respond to some obscure port or
> method that allows those that know how to SPAM through them. They
> definitely are being used to spam people, no question about that - question
> remains is how do we test for that 'open-ness' and get a positive response?
> Figure that one out and we will truly have a winner (until they change the
> method again - hehe).

Allthough this is pretty OT here, most open proxys are really open. And a
load of them are jeem proxy's. We submitted around 10.000 of them last
weeks. ...

> In the meantime we will block those hosts that 'should be using their ISPs
> mail servers' , in our opinion, of course (a "no-flames please"
> disclaimer). Seems to do the trick for us and very few complaints
> considering we handle close to a million mails a month if you count all the
> servers we either supply filters for or actually manage.
>
> Will look into your list(s) when we have a minute. *plug noted*

Ok, great.

Bye,
Raymond.