> I think penalizing because of connection idling (or timeout) is
> possible (V1 is doing it), but not such a good idea. There are
>  too many other possible (good in terms of the PB) reasons that
> could result in a idle connection (local workload, firewall, ISP,
> router, remote workload, too havy line traffic ....) but only one bad
> reason (remote spamming software). So it could happen, that assp
> will penalize good IP's in to 'extrem black' within some minutes, if
> there appears any external problem or a problem with your local
> components or lines over some minutes.

Yes, you're correct, Thomas, although imHo there is a way to do that
w/o hitting the "false positive" wall; see, the idea is that if a given
host
is sending us spam AND the host is ALSO idling then it should "climb
up" the penalty score faster since it will be an almost surefire spambot


------------------------------------------------------------------------------
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev 
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to