[Robotgroup] OT: Mail server "greylisting" technique

[Marc Emerson]

I heard a couple of years ago spammers were using mostly the secondary
mx because they believed it would be less secure.


-----Original Message-----
From: robotgroup-bounces at puremagic.com
[mailto:robotgroup-bounces at puremagic.com] On Behalf Of Shane Geiger
Sent: Tuesday, January 23, 2007 6:19 PM
To: The Robot Group Mailing List
Subject: Re: [Robotgroup] OT: Mail server "greylisting" technique

James, the question in my mind is:  What's keeping me from getting 
double or triple the spam anyway?  It doesn't seem like such a bad idea 
to me.  It might slow someone's mail server down a little by trying to 
contact your mail server using a bogus MX record.  Other than that, 
though, I don't see a problem with this.  On the upside:  It's very easy

to do.



Unfocused Brain wrote:
> If spammers do decide to get around this then you can expect to see
spam
> now being sent to all the mx's that are listed without regard as to
> which is primary. Could double or triple spam.
>
> James
>
> Clendon Gibson wrote:
>   
>> It sounds like a perfectly safe way to decrease spam. All your really
doing is forcing a fail-safe built in to the standard to apply every
time. 
>>
>> The only problem I see is that if you are using the MX records to
really record a fail safe connection then this method would eliminate
that failsafe. 
>>
>> This is security through obscurity. As long as the spammers don't
loose too many targets over this method it will continue to be
effective. If they start to feel the pinch then some clever person will
add 3 lines of code to the spam engines and the advantage will be gone.
>>
>> ----- Original Message ----
>> From: Vern Graner <vern at txis.com>
>> To: The Robot Group Mailing List <robotgroup at puremagic.com>
>> Sent: Tuesday, January 23, 2007 12:35:15 PM
>> Subject: [Robotgroup] OT: Mail server "greylisting" technique
>>
>> And now for something COMPLETELY different.. :)
>>
>> For those of you with Linux chops and/or mail server/handler
experience,
>> I'd like opinions on this:
>>
>> http://www.joreybump.com/code/howto/nolisting.html
>>
>> TIA :)
>>
>> Vern
>>
>>     
>
> _______________________________________________
> Robotgroup mailing list
> Robotgroup at puremagic.com
> http://lists.puremagic.com/cgi-bin/mailman/listinfo/robotgroup
>   

-- 
Shane Geiger
IT Director
National Council on Economic Education
sgeiger at ncee.net  |  402-438-8958  |  http://www.ncee.net

Leading the Campaign for Economic and Financial Literacy

_______________________________________________
Robotgroup mailing list
Robotgroup at puremagic.com
http://lists.puremagic.com/cgi-bin/mailman/listinfo/robotgroup