ietf-asrg
[Top] [All Lists]

Temp-failing first-time unknowns (was Re: [Asrg] filtering at connect time)

2003-03-04 13:06:08
On Tue, 4 Mar 2003, Mark Delany wrote:

How do you differentiate between list-washing and spam delivery attempts?

I don't, and I don't care.  Either way, it fails at RCPT TO:

However, grepping through my mail logs, I don't see any obvious
dictionary attacks.  I know other users who have reported this, but I
don't see it.  Besides, this technique has the pleasant side-effect of
stopping dictionary attacks too, unless the attacker makes a second attempt
for each recipient address.  Also, by watching the size of your "one-shot"
database, it quickly becomes apparent when you're under dictionary attack,
and you can block the offender.

Regards,

David.
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg