Nico Kadel-Garcia wrote:
Chris Drake wrote:
The answer is to put reasonable limits on email sending in place.
Err - no - the answer is for the ISP to send the zombie victim one
message saying "clean your PC, then phone the help desk", then
disconnect them and block their login. If you put a barricade in
front of a zombie, the zombie owner will adapt around it (eg: program
the zombie to auto-create HTTP accounts for sending from, or
whatever). If you *remove* the zombie, well, that actually solves
something.
That's quite expensive for ISP's to do,
Why?
and gets them into the same sort of ranting and whining that we see now
from people who think SPF infringes their freedom to send email from
wherever they want pretending to be whoever they want for their
convenience.
So what? If disconnecting zombies until unzombified actually solves the
problem and not just mitigates the symptoms, it is the right thing to do.
People whine all day for irrational reasons.