spf-discuss
[Top] [All Lists]

RCPT TO: rejecting

2004-05-25 01:41:05
I've found that connecting to the mail server of the MAIL FROM:
address and attempting to initiate an email (up to the DATA stage)
successfully detects around 30% of all my "joe jobs" spam (no MX for
the domain or the sender refusing 5xx my mail)...

Given that "real" spammer addresses get shut down quickly, or that
it's easy to disguise a real address by substituting characters like
capital I's for small "L"s etc, shouldn't this be part of the wider
scheme to prevent joejobbing ?