On 20 Aug 2003 at 11:36, Stewart, John wrote: > I had a couple of users ask me today if there was a change to our mail > config, as the number of spams they received had dropped off considerably. I > personally didn't notice much (750+ spams since Sunday), but I'm wondering > if anyone else has noticed anything. > > Perhaps the worms going around have infected some major spammers (we can > hope)?
There's a fairly extensive thread on this topic on the DShield list. Some people have noticed a significant dropoff in spam; others haven't. Several hypotheses have been discussed to explain the potential dropoff (one of which was spammers being infected, as you mention). o Apparently some of the worms/trojans which have been floating around for the past couple of months have allowed spammers to use compromised hosts as open proxies. As ISPs began blocking various ports due to Blaster activity, many of the spammers' open proxies were disabled as well. o Ron Guilmette and a couple of other spamfighters are now running extensive honeynets to catch the big open proxy hijacker spammers, and they've recently succeeded in getting a couple big-time spambags disconnected from their main provider. o China has finally started to pay attention to the massive spam problem in their country and some spamhausen have already gotten the Big Red Boot. Nels Lindquist <*> ---- Quidquid latine dictum sit altum viditur. Whatever is said in Latin, sounds profound. ------------------------------------------------------- This SF.net email is sponsored by: VM Ware With VMware you can run multiple operating systems on a single machine. WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
