Hi!

In my case I did the following:

I have a real-time "unknown users" collector which gains those mail-
address attempts that do not exist on my system (and never existed!) 
but spammers try to deliver like [EMAIL PROTECTED] / 
[EMAIL PROTECTED] / [EMAIL PROTECTED] / etc. I treat this non-
existing mail addresses like "spamtrap candidates".

You would be supprised if you knew how much absolutely false mail-
addresses do they try to deliver like 
[EMAIL PROTECTED] in spite I don't have any hidden 
weblinks for spamtraps.

If any of these "spamtrap candidates" reach a specific hit count then it 
automaticaly becomes a spamtrap. As time goes I reduce the hit count 
of each "spamtrap candidate", so accidentaly mispelled valid mail-
addresses won't become spamtraps. When the hit count of 
a "spamtrap candidate" is reduced to 0 then it is deleted from the list 
of "spamtrap candidates".

Now I have 37 users (in my small domain), 192 spamtraps and 
413 "spamtrap candidates" in spite of the fact I did not type in any 
spamtraps manualy.

I'm sure that it's not possible to apply this solution in a large 
environment, although anyone tries the same, be careful with:
- non existing mail addresses that ever existed
- mispelled mail-address subscriptions to mailing-lists

Regards,
Krisz


_______________________________________________________________________
Legyen ajándék, vagy kedves időtöltés a könyv a hideg téli napokon! 25% 
kedvezmény - alexandra.hu. 
http://ad.adverticum.net/b/cl,1,6022,117956,188205/click.prm



-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
policyd-users mailing list
policyd-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/policyd-users

Reply via email to