Re: Latest Viruses.

[Neil Herber]

It is rumored that on or about 2003-01-06 9:40 AM -0600, Chris Wagner wrote as follows:

Neil,

Does this response mean that the message is originating from KC RoadRunner's
network?

I guess I'm not following the data you pasted in.

So SpamCop runs the source IP against RBL servers to see if it's listed
first, then to verify IP -> domain validity?

Is that right?

Thanks,

Chris

Chris

My understanding is that Spamcop tries to validate the "Received:" chain, tossing out any spoofed IPs or domains. It then tags the first valid IP as the source of the message and does some voodoo to determine if any of the other IPs are relays. Any that it suspects of being relays are submitted to its relay testing module, which does more voodoo.

Spamcop also runs it's own RBL, which I use, but which has been known to issue false positives. They do seem to be quite responsive at removing such false positives though. I run all the spam I receive through Spamcop, in part to feed the RBL mechanism.

--
Neil

Neil Herber
Corporate info at http://www.eton.ca/
Eton Systems, 15 Pinepoint Drive, Nepean, ON, Canada K2H 6B1
Tel: (613) 829-4668


#############################################################
This message is sent to you because you are subscribed to
the mailing list <[EMAIL PROTECTED]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to <[EMAIL PROTECTED]>