The UCE mail programs use verify, seen them do it. It's a quick one line
check via telnet. These people aren't into too much work, or if it requires
more then a basic knowledge of the Internet.
Limiting the every outbound Email to 100 recipients, including local users,
stops some of the relaying.
Shutting off relaying to only our IP addresses, stops more.
Having a spam clean up fee of $250 minimum, a $3 per message fee for over
100 Email in a 24hr period and using a collection agency to collect it,
helps too.
[EMAIL PROTECTED]
http://www.kendra.com
----- Original Message -----
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Saturday, July 29, 2000 8:13 PM
Subject: Re: [IMail Forum] STOP SPAM 2
> > Setting limits on the number of messages sent at one time prevents
> > mail bombs (sometimes called dictionaries) from trying to send a
> > couple of thousand Emails to non-existent and existent users.
>
> That's good to help reduce incoming spam (spam sent to local users).
>
> But what about relaying, where a spammer gets a dialup connection, and
sends hundreds of thousands of messages through your mail server? This
would cause a huge waste of money (time and expense in cleaning up the
mess). I think the only reliable option in IMail is to force users to come
from specific IP addresses, or use SMTP AUTH. I was thinking of coming up
with a method that would prevent this, without forcing users to change their
E-mail settings.
>
> > In SMTP Security setting the check in the Disable SMTP VRFY Command
> > box prevents spammers from mass verifying Email addresses as valid
> > on your server.
>
> FYI, although this is very, very common (disabling VRFY), it doesn't do a
thing! All you have to do is send a "MAIL FROM" command, and then a "RCPT
TO" command, and you'll see whether or not the user exists. You can send
multiple RCPT TO commands to check further users. Of course, spammers (or
spammer program designers) may not know this.
> -Scott
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
