Re: In response to Housley-mass-sec-review

On Mar 3, 2005, at 6:28 PM, Hallam-Baker, Phillip wrote:

> It is almost certainly sufficient to address the problem.

Agreed.  Has there been any comment by the mass security reviewers 
regarding this approach?

> If you monitor lookups to the DNS server you can see the number of 
> queries
> being made and thus spot anomalies. If you have a bazillion lookups to 
> a
> particular email and you are an open webmail provider you are probably
> looking at a spam issue.

This is a very useful side benefit.

-andy