RCPT TO: rejecting2004-05-25 01:41:05I've found that connecting to the mail server of the MAIL FROM: address and attempting to initiate an email (up to the DATA stage) successfully detects around 30% of all my "joe jobs" spam (no MX for the domain or the sender refusing 5xx my mail)... Given that "real" spammer addresses get shut down quickly, or that it's easy to disguise a real address by substituting characters like capital I's for small "L"s etc, shouldn't this be part of the wider scheme to prevent joejobbing ?
|
|