I've been subscribed to the list for about 4 months, and I searched through
my locally saved messages for topics of this nature, but couldnt find any..
So forgive me if someone has publicly announced this revelation..  Also
forgive the cross-posting; I want to get a bunch of input.


I am working on a program that will scan mail with "X-Spam-Status: Yes" in
the header, and determine the last host who sent it to me was.  I am then
going to insert that IP into my mail system's denied host list (to give some
permanent error to the sending host).  A cron is going to run to dymajically
determine when my mail server should start accepting mail from that server
again.

While coding, I had a thought... Would it be a good idea to Auto-White
list/Auto-Black list Mail Servers themselves?  While most of us don't have
access to MAPS, it might be a good idea.

So if SA has gotten -- i dont know -- 20 legitimate emails from a certain
host, then that host is white-listed for ~30 days (with each additional day
getting a good email extending the expiration a day)
if SA gets a few SPAMs, it is auto-black listed (with some expiration)

And, not to clutter your minds, but what if we substituted the Host-Based
AWL/ABL with Ratings?  If an email came from a host in the "Good Servers"
list, give it a score of -2; if the host is in the "Spammer Servers" list,
give it +2.

The only downside I can see is that the allow/deny database could get quite
big and rather quickly for bigger mail servers.  But if a bigger mail server
is using SA in the first place, they've probably got the CPU to spare.

Thoughts?


-------------------------------------------------------------------
Jeremy Kister
www.jeremykister.com
PGP: http://www.jeremykister.com/jeremy/public_key.asc
-------------------------------------------------------------------



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to