thus Kurt Buff spake: > Rainer Zocholl said... > >>An other trick is "gray listing": >>If there is a new "mail from:" adresse, reject the email with a >>"450 Please try again later. See http:\\info for the reason >>of the delay." >> >>Viruses don't run a mail quue and will never try again. >>Spamers thombies don't run mail quues too (but may >>simply resent the email. That's why serveral spam mail will >>be seen twice. ). > > > This is a limited-time trick - if it isn't already beat down, it will soon > be. I'm already seeing multiple attempts to relay in my postfix logs from > single IP addresses, and the attempts are from obviously infected computers.
me, too. i'm running greylisting for quite a while now, and in the last few months more and more spam gets through (greylisting). however, i think that greylisting is more focusing on fighting spam as viruses have 'more time' (because they have more resources on the zombie they reside and less targets). (...) >> >> >>Rainer > > > Kurt -- Timo Schoeler | http://macfinity.net/~tis | [EMAIL PROTECTED] //macfinity -- finest IT services | http://macfinity.net Key fingerprint = F844 51BE C22C F6BD 1196 90B2 EF68 C851 6E12 2D8A There are 10 types of people in the world. Those who understand binary and those who don't. _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
