Why doesn't DCC help against image spam?

Dennis Willson taz at taz-mania.com
Wed Dec 27 19:11:16 CET 2006


I wrote my own... It's a milter that allows me to decare specific 
email addresses and even full domains to be honeypot addresses and it 
then collects the IP addresses of the senders and uses them as a 
blacklist.

It can run on the same Sendmail as your normal mail server as it does 
not interfere with non-honeypot email addresses (unless the source IP 
is in the blacklist, then optionally you can reject, discard or allow 
to continue for further processing).

I'm currently working to two extensions... One is a routine that will 
take the list of IP addresses and create a BIND zone file so that the 
blacklist can be shared via a DNSBL. Two is a mailwatch extension to 
manage and monitor the spamtrap and see statistics that it collects.


On Wed, 27 Dec 2006 11:58:32 -0600
  "Mike Kercher" <mike at vesol.com> wrote:
>
>
>
>-----Original Message-----
>From: mailscanner-bounces at lists.mailscanner.info on behalf of Dennis
>Willson
>Sent: Wed 12/27/2006 11:52 AM
>To: MailScanner discussion
>Subject: Re: Why doesn't DCC help against image spam?
>  
>
>The only "image" Spam that is currently getting through my filters is 
>the "stock scam" images and they are different everytime I see it and 
>they are using wavy text, odd colors and mixed fonts, etc... to try 
>and fool the OCR scanners.
>
>So, my question would be, how effective are the OCR scanners when the 
>Spammers are doing this?
>
>Since I put my new Spam Trap in place I have seen a reduction of this 
>Spam getting through. It appears the honeypots are seeing the sources 
>of the images first (or close to it) and stopping that source... 
>ofcourse they rotate sources through out the day, but the honeypots 
>are getting over 2000-3000 new IP address every day. The "hit rate" 
>on 
>the now blacklisted source is fairly high.
>
>_____________________________________
>
>What spam trap did you put in place?
>
>Mike


--------------------------------------------------
Dennis Willson

taz at taz-mania.com
http://www.taz-mania.com

Ham (Extra Class): ka6lsw
Scuba: Rescue Diver, EANx, Wreck, Night, Alt, Equip, UW Photographer, 
Gas Blender

Owner: Kepnet Internet Services

Life should not be a journey to the grave with the intention of 
arriving safely in a nice looking and well preserved body, but rather 
to skid in broadside, thoroughly used up, totally worn out, and loudly 
proclaiming, "WOW! WHAT A RIDE!"


More information about the MailScanner mailing list