Re: Spam and simultaneous connections

On Thu, Oct 04, 2007 at 09:44:11AM -0700, Steven Kurylo wrote:
> Since the tide is changing, I'm looking for the least intrusive
> method. I think just blocking dynamic addresses will do the trick -
> and with more and more ISP blocking port 25 soon it will be a moot
> point.

Theoretically, yes.

I do greylisting based entirely on IP, anything persistent enough to get
through that it then must pass sbl-xbl.spamhaus.org. That's been an
optimal solution for me to avoid false positives and still not need to
read a byte of the message. Presumably that would at least shorten the
duration of the connections while still leaving other filtering to catch
what's left.
Received on Thu Oct 4 12:08:23 2007