spf-discuss
[Top] [All Lists]

Re: related to "mxout": a 3-step antispam rule that stops zombie spam

2004-04-21 11:29:36
On Wed, Apr 21, 2004 at 08:16:51AM -0400, Theo Schlossnagle wrote:
| >
| >Most zombie machines get blocked by #3.
| >Legitimate linux hobbyists get through due to #2.
| >Spammers who publish SPF get blocked by #1.
| >
| >Voila!  Everybody's happy.
| 
| Looking back through our logs, I see at a bare minimum 1 false positive 
| per day on your rule #3.  Sometimes a double digit number.  "Everybody" 
| would probably overstate your happy audience marginally.

The idea is that the FP victims can do something about it by publishing
SPF, so they get through due to rule 2.