On Tue, Jul 22, 2008 at 11:37:39AM -0400, Kevin Parris wrote: > <snippage> > > The spammers are spending other people's money, since much of their > "work" is done by hijacked machines, thus they do not care how > 'expensive' their project might be, and any responses they do get > are practically pure profit. So to probe a million targets and find > even one vulnerable is "worth the trouble" since it is not their own > trouble. > > The flaw in your logic is that you are thinking logically, working > from the premise that any intelligent administrator (such as > yourself) would never create a machine that is susceptible to this > particular attack. Maybe YOUR server is not a viable avenue for the > spammer, but there are SO many servers out there - finding a few > that ARE viable is almost a certainty, since some people who connect > systems to the internet are not so well-informed as we here. > > I believe that until a technique is discovered to eliminate > ignorance and gullibility from the human population, there will be > no solution to the spam problem.
If I may extend this OT thread, I'd like to know how draconian admins get with their mail servers. Without considering RBLs, how much do you limit client connections: Allow only those with (PTR and/or A) DNS records? Allow only those with MX records? I figure only the latter will be the Final Solution to spam. But there are probably only two chances of that - slim and none. > <snippage> > > -- > Christopher Bort > <[EMAIL PROTECTED]> > <http://www.thehundredacre.net/> Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com Jesus turned and saw her. "Take heart, daughter," he said, "your faith has healed you." And the woman was healed from that moment. Matthew 9:22 (NIV)