I believe it was "the more they OVERTAKE the plumbing, the easier it is to stop up the drain" Oh geez I need a life....
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: Monday, December 06, 2004 4:23 PM To: Colbeck, Andrew Subject: Re[2]: [Declude.JunkMail] ENDing surbl filter file On Monday, December 6, 2004, 10:50:19 AM, Andrew wrote: <snip/> CA> So... I don't know how antispam software in general is adapting to those CA> anti-SURBL (or just anti-filtering) techniques, but the short of is that CA> your optimization is a good idea to save mail processing time, but not CA> against at least one spam gang. I love it when they do things like this. We simply code for the structure of their obfuscation and frequently this is enough to capture whole families of new campaigns. ... what is it that Scotty said about the hyperwarp drive as he was handing parts to McCoy... "The more they rethink the plumbing, the easier it is to stop up the works..." A good argument for a diversified approach to spam filtering is that one mechanism often creates countermeasures that can be exploited by another. _M --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
