J.A. Terranson wrote: <<snip>> > > And further, does anyone have any idea how to pick apart how much of > > that is simply relaying type activity vs.dedicated spam-bot activity? > > Does it matter?
Yes, as many of the former are simply due to (legitimate user) misconfiguration and do not provide any form of backdooring to the system, whereas the spammers are much more actively involved in "managing" the latter and can actively update/replace/supplement the code running on them. Thus the latter are much more likely able to avoid (or perhaps "survive") "fixing". -- Nick FitzGerald Computer Virus Consulting Ltd. Ph/FAX: +64 3 3529854 _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
