Kee Hinckley <nazgul(_at_)somewhere(_dot_)com> wrote:
I know of at least one ISP (and I'm sure there are others) that do
this. He blocks based on bounces. As soon as he blocks an IP,
another one starts sending him the spam. This goes on for thousands
of IPs.
I spent a few days last year blocking IP's based on bounces. It
went as follows:
<block 100's of IP's>
<wait 10 minutes>
<repeat>
No end in sight,
I seriously wonder if there isn't some rather sophisticated
distributed server spam software running out there on rooted servers,
and we just haven't figured it out yet.
That would fit the data I'm seeing.
Of course, 10,000 clueless small-scale spammers would also fit the
data, but I think that's less likely.
Alan DeKok.
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg