Magnus Holmgren wrote:
Question: Is there any knowledge as to how spammers deal with different kinds of failure? Does it matter if I reject the RCPT command or the MAIL command, or even drop the connection right away
I'm sure it depends on the spammer, but a while back I started looking at the logs for "User unknown" rejections, and found a number of accounts that had been dead for *years* were still getting hammered with incoming mail. I turned them back on, unsubscribed from everything for a few months to weed out any legitimate mailing lists that the old users might have subscribed to, and eventually turned them into spam traps to collect training data for Bayes, Razor, etc.
So at least some spammers ignore rejections entirely. -- Kelson Vibber SpeedGate Communications <www.speed.net>
