Re: [Asrg] Spam detection system proposal

["Alan DeKok" <aland@freeradius.org>]

Kee Hinckley <nazgul@somewhere.com> wrote:
> I know of at least one ISP (and I'm sure there are others) that do 
> this.  He blocks based on bounces.  As soon as he blocks an IP, 
> another one starts sending him the spam.  This goes on for thousands 
> of IPs.

  I spent a few days last year blocking IP's based on bounces.  It
went as follows:

  <block 100's of IP's>
  <wait 10 minutes>
  <repeat>


  No end in sight,

> I seriously wonder if there isn't some rather sophisticated 
> distributed server spam software running out there on rooted servers, 
> and we just haven't figured it out yet.

  That would fit the data I'm seeing.

  Of course, 10,000 clueless small-scale spammers would also fit the
data, but I think that's less likely.

  Alan DeKok.
_______________________________________________
Asrg mailing list
Asrg@ietf.org
https://www1.ietf.org/mailman/listinfo/asrg