Re: machine gun
Bob Beck <[email protected]>
| Newsgroups | gmane.mail.spam.greylist.user |
|---|---|
| Message-ID | <[email protected]> |
* Barb Dijker <[email protected]> [2006-01-20 14:45]: > We are starting to see more machine gun spammers. For example, > yesterday youngexplorerscatalog.net attempted to send a message to a > single recipient once per second until greylisting allowed the message. > .... > > A quick peruse of the database shows a small handful of legitimate > mail that appears to be using the machine gun approach, e.g., mail > (really) from ebay that was blocked 80 or 90 times .... Means it is probably time to start exploring that in greylisting software - Should be easy enough to detect number of retries > X where X is "many" in the greylisting period, and just like deciding a server that does not retry is hostile, a server that retries exessively or stupidly is also hostile. Getting X right is the trick. What you think barb? 100 in 30 minutes is too much? or less? -Bob