ietf-asrg
[Top] [All Lists]

Re: [Asrg] Spam detection system proposal

2003-03-05 10:51:24
On Wed, Mar 05, 2003 at 11:13:07AM -0500, David F. Skoll allegedly wrote:

It is quite expensive to gather a large set of open relays.  If you're
sending out 500K messages, and you want to limit it to 1,000
messages/IP, you need to find 500 open relays.

Also, a lot of spammers are pretty unsophisticated and send from DSL
or cable-modem lines.  This scheme would get them pretty fast.

We need experiments to tell for sure.

No we don't. Plenty of people on this list, such as myself, are on the
end of systems that routinely get hit by thousands of Open Proxies per
day. (Open Relays btw are currently rarely used by spammers in
comparison).

I can tell you as a fact that spammers do have large OP lists and
routinely use them. There are companies/people that make a living out
of making these lists and selling s/w that uses them. send-safe.com is
just one very public example of that. All the spammer does is pay the
bucks to send-safe and he gets a regular feed of fresh OPs from the
send-safe mothership.

(Talk about dynamic. Send-safe were dumped by their Russian hosters
earlier this week and now they pop up in the UK).


Regards.
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg