-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Matt Kettler writes:
> At 09:11 PM 2/2/2005, Shane Mullins wrote:
> >Here is a link from ZDNet warning of a spam increase.  I can't wait to
> >see SA smat it down.
> 
> Hmm.. so zombies are going to start using the legit mailserver instead
> of acting as a direct delivery... Hmm.. Well, we should see the DUL RBL
> hits drop off pretty fast. Won't affect SURBL hits though.

all blocklists looking at the last-untrusted host in the Received headers
will have a problem; XBL, SORBS, NJABL.  That host will be the ISP's
mailserver.

Perhaps it's time to re-enable DNSBL lookups further into the Received
headers, as we used to do in pre-3.0.0 versions...

> The only problem I see with the tactic is the ISP itself is likely to deal 
> with the infected users pretty quickly, instead of dragging their feet, 
> since the spam will now be bogging down their servers, instead of bypassing 
> them.

yep!  that's the good news.  kind of.

- --j.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Exmh CVS

iD8DBQFCAYxHMJF5cimLx9ARAkwRAJwOo5lv2/KG7+I8Msbp9WQKrhmFDwCcDJgo
oDeBwEzPrDn7HkYZ/WI2F8o=
=0j4T
-----END PGP SIGNATURE-----

Reply via email to