On Sat, 22 Jan 2005, Matt Kettler wrote:
> At 04:35 PM 1/22/2005, Ron E. wrote: > > I have spent some time searching for something I assumed existed, > >which is a method of detecting when large quantities of the same message, > >or messages with nearly the same content (body & subject) are passing > >through an MTA within a specified time period. It seems to me this could > >be a useful way to detect not only spam but other types of problems as > >well - error conditions, mail bombs, etc. > > Hmm, DCC works very well for this kind of thing, and you could run it as a > local-only server. > > Sounds interesting, but I thought DCC, like pyzor/razor simply checks message content against known spam databases? How would one use it to detect duplicate messages? Any idea? Thanks
