[SpamCop-List] Re: email hijacking [Joe Job]
ric.gates at bigsleep.org
Fri Feb 6 19:27:11 EST 2004
On 06 Feb 2004 Eric entered spamcop and left
news:c00k75$qk9$1 at news.spamcop.net:
> Blammo wrote:
> We already return appropriate codes for matches on blocklists.
> However, every few days we see a dictionary attack with attempts
> to send to several hundred names at our domain, coming
> from an IP address which is not on any of the blocklists we use.
> These typically are not individual SMTP sessions, the spamware does
> not drop the connection as soon as it gets one User Unknown response.
> It keeps plowing ahead. Sometimes it hits a valid name among
> the chaff. :-(
> That's the case where slowing down the 450 User Unknown response
> would be neat. Keep them busy for a good long time.
Exactly, I used to do that, but I see the connection dropped on sessions
like that, so I don't believe it really does any good.
But then I don't have any spamware to test with either.
Hey! I never thought of searching for "spamware".
More information about the SpamCop-List