Why doesn't DCC help against image spam?
Dennis Willson
taz at taz-mania.com
Wed Dec 27 19:11:16 CET 2006
I wrote my own... It's a milter that allows me to decare specific
email addresses and even full domains to be honeypot addresses and it
then collects the IP addresses of the senders and uses them as a
blacklist.
It can run on the same Sendmail as your normal mail server as it does
not interfere with non-honeypot email addresses (unless the source IP
is in the blacklist, then optionally you can reject, discard or allow
to continue for further processing).
I'm currently working to two extensions... One is a routine that will
take the list of IP addresses and create a BIND zone file so that the
blacklist can be shared via a DNSBL. Two is a mailwatch extension to
manage and monitor the spamtrap and see statistics that it collects.
On Wed, 27 Dec 2006 11:58:32 -0600
"Mike Kercher" <mike at vesol.com> wrote:
>
>
>
>-----Original Message-----
>From: mailscanner-bounces at lists.mailscanner.info on behalf of Dennis
>Willson
>Sent: Wed 12/27/2006 11:52 AM
>To: MailScanner discussion
>Subject: Re: Why doesn't DCC help against image spam?
>
>
>The only "image" Spam that is currently getting through my filters is
>the "stock scam" images and they are different everytime I see it and
>they are using wavy text, odd colors and mixed fonts, etc... to try
>and fool the OCR scanners.
>
>So, my question would be, how effective are the OCR scanners when the
>Spammers are doing this?
>
>Since I put my new Spam Trap in place I have seen a reduction of this
>Spam getting through. It appears the honeypots are seeing the sources
>of the images first (or close to it) and stopping that source...
>ofcourse they rotate sources through out the day, but the honeypots
>are getting over 2000-3000 new IP address every day. The "hit rate"
>on
>the now blacklisted source is fairly high.
>
>_____________________________________
>
>What spam trap did you put in place?
>
>Mike
--------------------------------------------------
Dennis Willson
taz at taz-mania.com
http://www.taz-mania.com
Ham (Extra Class): ka6lsw
Scuba: Rescue Diver, EANx, Wreck, Night, Alt, Equip, UW Photographer,
Gas Blender
Owner: Kepnet Internet Services
Life should not be a journey to the grave with the intention of
arriving safely in a nice looking and well preserved body, but rather
to skid in broadside, thoroughly used up, totally worn out, and loudly
proclaiming, "WOW! WHAT A RIDE!"
More information about the MailScanner
mailing list