Yahoo Groups archive

Milter-greylist

Index last updated: 2026-04-28 23:32 UTC

Message

Re: [milter-greylist] BotNet plugin

2007-01-05 by Matthias Scheler

On Fri, Jan 05, 2007 at 02:19:26PM +0100, Oliver Fromme wrote:
>  > > The idea is that many small sites (e.g. soho) use the
>  > > same servers for incoming and outgoing mails, so the
>  > > MX record (or A record) of the domain is the same as
>  > > the one we receive their mail from.
>  > 
>  > The problem is that spammers create such real looking setups, too.
> 
> No, not easily, because you need many servers to send
> massive amounts of spam.  That's why they often use
> botnets.

They can have a lot of MX records which point to A records that resolve
to a lot of hosts. So it would perhaps make sense to check for such
things.

	Kind regards

-- 
Matthias Scheler                                  http://zhadum.org.uk/

Attachments

Move to quarantaine

This moves the raw source file on disk only. The archive index is not changed automatically, so you still need to run a manual refresh afterward.