Using other blacklists for host blocking?

Garry Glendown garry at glendown.de
Mon Dec 1 05:24:40 GMT 2008


Hugo van der Kooij wrote:
> The two are totally unreleated. Most SSH session originate from unix
> boxes under poor management.
> 
> Where just about all spam originate from poorly managed windows machines.
> 
> So what will you learn in relation to SMTP from these SSH connections?
> Just about nothing.

Well, the amount of unsuccessful SSH attempts seemed to vary
coincidently with the McColo shutdown ... that's what got me thinking
... guess I need to do some log analysis on my main MX box and see if
there's any amount of matches ...

-gg


More information about the MailScanner mailing list