On Sat, 20 Dec 2003 12:51:20 -0600, David Gibbs <[EMAIL PROTECTED]> writes:

> Jeff Koch wrote:
> > Good grief. What a 'holier than thou' attitude.
> 
> Not in the slightest ... you didn't mention you had customers that might
> be spammers (I won't touch that).
> 
> Based on your original post, it seemed to me that your primary problem
> wasn't the spam going out, but that people were getting into your system
> and sending spam.  That warrants tightening your security.
> 

Tough problem. If wishing customer computers secure made it so, then
how do you explain the ten million worm infections over the last few
months? Or the few thousand computers *still* infected with code red,
over a year and a half later.

Having something like SA on outgoing email *is* a good thing. It can
act as an alarm, triggering if any host does do something evil, and at
the same time act as a throttle, to minimize the damage until a person
can diagnose the alarm.  A computer on a 1mbit connection can send 30
spams a second, or a hundred thousand an hour. A throttle that slowed
down high-scoring email to at most one a second won't stop
misbehavior, but will cut it down by a factor of 30.

Jeff, to answer your question, I don't know, but I do think it is a
good question to ask.


Scott


-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to