Re: loop detection by message content...

--On Thursday, April 10, 2003 10:52 AM +0200 Marco Gaiarin 
<[email protected]> wrote:

>
> We got a strange attack from a nasty server that have set tons of
> messages with different mesageid but the same body.
>
> Someone have built a loop detection based of an (md5?!) hash of the
> body, or some sort of quota based on site?!

Interesting question.  I don't think anyone has quite done exactly 
what you describe, however: look at the anti-spam packages.  I think 
Vipul's Razor (sp?) does approximately that, with user sent 
suggestions...  Spammassassin would be able to use a long chunk of 
text as an exact match...  The Bayesian systems could just about 
notice the same message...

They aren't really designed with your problem in mind, but they deal 
with similar problems, and may be adaptable enough to do the job.

Daniel T. Staal

---------------------------------------------------------------
This email copyright the author.  Unless otherwise noted, you
are expressly allowed to retransmit, quote, or otherwise use
the contents for non-commercial purposes.  This copyright will
expire 5 years after the author's death, or in 30 years,
whichever is longer, unless such a period is in excess of
local copyright law.
---------------------------------------------------------------