On 20/11/12 20:26, Cathryn Mataga wrote:
Easy enough to block #25 by default -- turn it on for anyone who asks.
Indeed.
I think the idea of a botnet black hole list is great, really.
Spamhaus already do this. It's called the Exploits Block List (XBL):
http://www.spamhaus.org/xbl/
To quote:
The Spamhaus Exploits Block List (XBL) is a realtime database of IP
addresses of hijacked PCs infected by illegal 3rd party exploits,
including open proxies (HTTP, socks, AnalogX, wingate, etc),
worms/viruses with built-in spam engines, and other types of
trojan-horse exploits.
/end quote
Spamassassin already queries the Spamhaus lists, including the XBL -
feel free to increase the scores to "black hole" any hits.
Alternatively, many mail admins query Spamhaus lists during the smtp
transaction and reject mail outright.
