On Fri, Jan 05, 2007 at 02:19:26PM +0100, Oliver Fromme wrote: > > > The idea is that many small sites (e.g. soho) use the > > > same servers for incoming and outgoing mails, so the > > > MX record (or A record) of the domain is the same as > > > the one we receive their mail from. > > > > The problem is that spammers create such real looking setups, too. > > No, not easily, because you need many servers to send > massive amounts of spam. That's why they often use > botnets. They can have a lot of MX records which point to A records that resolve to a lot of hosts. So it would perhaps make sense to check for such things. Kind regards -- Matthias Scheler http://zhadum.org.uk/
Message
Re: [milter-greylist] BotNet plugin
2007-01-05 by Matthias Scheler
Attachments
- No local attachments were found for this message.