On Tue, Jul 09, 2002 at 06:14:00PM -0400, Dean Anderson wrote: > Look at Vipul's Razor and DCC, which are content based rather than IP > based. IP based spam filtering isn't viable anymore. I've seen a lot of > virus-based spam sending recently, where there are only a handful of > messages, sometimes just one, per infected address.
Blocking viruses/worms is different than blocking spam. Worms typically come in from people who didn't mean to send the message, but they got infected. You don't want to block them, you want to block their message -- that's when you do content filtering. Spammers very much do use open relays to send their mails to help obfuscate where they're coming from. You still want to do content filtering to catch their spam, but you want to block the open relays so that you stop receiving stuff from these servers. -- Theo Van Dinter, [EMAIL PROTECTED][EMAIL PROTECTED] Consultant, Collective Technologies (www.collectivetech.com) Systems Administrator, bblisa.org/kluge.net --- Send mail for the `bblisa' mailing list to `[EMAIL PROTECTED]'. Mail administrative requests to `[EMAIL PROTECTED]'.
