On Sun, May 26, 2002 at 11:13:12PM -0400, [EMAIL PROTECTED] wrote:
>
> I missed this original thread, but we're also getting those "test"
> emails.... What exactly is their purpose?

They're often used to "clean" spammers' lists.  If the sender gets a
bounce message, they remove the address from their database.  Such
cleaning is most often done with innocent-looking messages that appear
to be personal ("Hi Mike, you free this weekend?" or "Hey, are you still
at this address?").

Another possibility is that a spammer is testing new software, sending
the duplicate tests completely by accident.

I agree that blocking the domain 163.net is a good idea, along with a
pile of other domains used primarily for spam.  Other stuff you could
do is simply return bounces so the sender using a procmail "script" like
http://www.it.ca/software/procmail-bounce or simply block any inbound
SMTP from 210.0.0.0/7 which may have the added bonus of stopping lots
of other spam as well.  YMMV.

But this isn't really the forum for general spam abatement discussion.
The spam-l list has more than enough all on its own.  Anyone interested
in hanging with a group of jaded, cynical sysadmins whose hatred of spam
burns with the white hot fire of a thousand suns should definitely join.

-- 
  Paul Chvostek                                             <[EMAIL PROTECTED]>
  Operations / Development / Abuse / Whatever       vox: +1 416 598-0000
  it.canada                                            http://www.it.ca/

Reply via email to