On Mon, 13 Oct 2003, Jack Gostl wrote: > > Given that spammers are now using hijacked machines as HTTP proxy servers, > > you're more likely to DDOS several dozen poor schmucks' home cable modem > > No... I think you missed something here. If the spam was hawking the "ABC > Corp. wrinkle removal cream", you would being going to the URL of "ABC > Corp.", not the machine that spammed you.
Note that I said "HTTP proxy" not "SMTP proxy". Spammers actually are hijacking machines, installing HTTP proxies, then pointing their DNS at the hijacked machines' IPs. The URL in the message says "abc.biz" but the DNS rotates through a large number of proxies to make it nearly impossible to trace the ultimate destination of the clicks. Helps prevent complaints from reaching the ISPs of the people who paid for the spam, and has the side-effect of deflecting DDOS of the real servers, to which the proxies forward the requests. ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. SourceForge.net hosts over 70,000 Open Source Projects. See the people who have HELPED US provide better services: Click here: http://sourceforge.net/supporters.php _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
