[SpamCop-List] Re: email hijacking [Joe Job]

[Blammo]

On 06 Feb 2004 Eric entered spamcop and left
news:c00k75$qk9$1 at news.spamcop.net: 

> Blammo wrote:
> 
> 
> We already return appropriate codes for matches on blocklists.
> However, every few days we see a dictionary attack with attempts
> to send to several hundred names at our domain, coming
> from an IP address which is not on any of the blocklists we use.
> 
> These typically are not individual SMTP sessions, the spamware does
> not drop the connection as soon as it gets one User Unknown response.
> It keeps plowing ahead.  Sometimes it hits a valid name among
> the chaff.  :-(
> 
> That's the case where slowing down the 450 User Unknown response
> would be neat.  Keep them busy for a good long time.
> 
> 


Exactly, I used to do that, but I see the connection dropped on sessions 
like that, so I don't believe it really does any good.
But then I don't have any spamware to test with either.
Hey! I never thought of searching for "spamware".
-- 
| Ric
|