Marc Perkel wrote:
Michele Neylon wrote:
On 2 Jul 2008, at 19:56, Marc Perkel wrote:
Again - it's not to figure out where spam comes from. It's figuring
out where non-spam comes from. I think there are registrars out
there that don't have any spam domains registered.
What are you trying to prove?
Your logic completely escapes me
I also fail to see how the registrar is of much importance
There are over 900 ICANN accredited registrars
Of those about 200 odd are active
Of the 200 a handful account for the bulk of all domains registered /
managed
Statistically this means you're going to see spam from domains
registered with enom, godaddy, directi, tucows and a few others. It
doesn't mean anything
In fact it's totally meaningless
It's interesting how the concept of white rules seems to be beyond
comprehension here. There is a registrar called markmonitor.com that
looks like a very high end and expensive registrar that only services
big companies like banks and such. So domains who are registered
through Markmonitor would not be spammers and would likely be all ham.
This isn't about spam detection - it's about ham detection.
The question is, how do you reliably tell that the mail actually came
from the from company in question? It can be spoofed, or they can end up
with compromised systems.