Erez Zadok <ezk(_at_)cs(_dot_)sunysb(_dot_)edu> wrote:
My own experience is also that the vast majority of spam comes from forged
addresses that don't exist.
Like the 100,000 fake addresses at my domain. The annoying
"notifications" to "abuse@" about spam from my domain went away only
when I gave up, and firewalled port 25 for everyone but a tiny
whitelist.
Before that, I had weekly fights with anti-spam people, who didn't
want to understand that most headers were forged. Their experience
may have been different than mine, but it was a source of great
frustration that they refused to believe my experience.
It's not just a few domains, either. Look at the reports on this
list of people re-activating domains after 3 years, and immediately
receiving 10K or 100K spams. There is *no* way that any legitimate
business would be sending that much mail to addresses which don't
exist, and *never* clean out bounces.
Alan DeKok.
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg