Using other blacklists for host blocking?
garry at glendown.de
Mon Dec 1 05:24:40 GMT 2008
Hugo van der Kooij wrote:
> The two are totally unreleated. Most SSH session originate from unix
> boxes under poor management.
> Where just about all spam originate from poorly managed windows machines.
> So what will you learn in relation to SMTP from these SSH connections?
> Just about nothing.
Well, the amount of unsuccessful SSH attempts seemed to vary
coincidently with the McColo shutdown ... that's what got me thinking
... guess I need to do some log analysis on my main MX box and see if
there's any amount of matches ...
More information about the MailScanner