Well, you _could_ review the messages captured by your spamtraps and create filters for them.
<shameless plug> Or, if you were a Message Sniffer subscriber then you would simply point your spamtrap aliases at our inbound spam address for your system and we would create new filters for you. </shameless plug> If you were really, really slick you could even script something to collect statistics on the IP sources of the spam arrivals, compare those to the stats of the ham arrivals (normal email) and create a dynamic, local ip block list for your system... nah... that sounds like a lot of work. _M >-----Original Message----- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] On Behalf Of >David Delbridge >Sent: Friday, July 11, 2003 3:06 PM >To: [EMAIL PROTECTED] >Subject: Re: [IMail Forum] Catch-All Mailbox Caveats > > >Going slightly off-topic, how do you use the messages >collected in spamtraps? I understand the concept -- mail >received at the spamtrap address is guaranteed to be >unsolicited advertising -- but how do you translate this >information to filters at the mail server for the future >benefit of legitimate addresses? > >FYI, I employ Declude Anti-Spam. Realizing from your advice >that I can so easily create a spamtrap, I am now interested in >incorporating one into my Declude configuration, assuming >that's how it would work. > >Thank you all for the helpful replies! > >Dave > >Pete McNeil wrote: >> >> You are not overreacting. >> The "nobody" alias is one of the better ways to create new >spamtraps. >> Turn it on for a while and magical new addresses start to receive >> email. Collect the names from the logs, set them up as spamtrap >> aliases, and turn off the nobody - instant targeted >spamtraps for that >> domain. >> >> If you don't want to have that effect... I highly recommend >you don't >> turn on the nobody alias. >> >> -- a more practical reason not to turn on the nobody is that >it delays >> the time before the sender realizes they've got the wrong address. >> Sometimes the recipient doesn't even realize it's wrong - and that >> leads to problems later on --- >> >> Hope this helps, >> _M >> >> Pete McNeil (Madscientist) >> President, MicroNeil Research Corporation >> Chief Sortmonster (www.sortmonster.com) >> >> >-----Original Message----- >> >From: [EMAIL PROTECTED] >> >[mailto:[EMAIL PROTECTED] On Behalf Of David >> >Delbridge >> >Sent: Friday, July 11, 2003 1:07 PM >> >To: [EMAIL PROTECTED] >> >Subject: [IMail Forum] Catch-All Mailbox Caveats >> > >> > >> >Hi all, >> > >> >What are the real-world caveats of offering "catch-all" mailboxes >> >(a.k.a. "nobody" aliases in IMail)? >> > >> >A hosting provider, I have long denied this service to our >customers >> >for fear of spammers inundating our mail servers with fabricated >> >addresses culled from a name dictionary. Furthermore, I fear that >> >when those spammers do not receive a "No Such User" error, >they will >> >catalogue the bogus addresses as "legit," share it with other >> >spammers, and forever send thousands (millions?) of mis-addressed >> >messages to a domain that has long since disabled the catch-all >> >feature. >> > >> >Am I overreacting? >> > >> >Any input is appreciated. >> > >> >Dave >> > >> >-- >> > >> >David M. Delbridge >> >Circa 3000 >> >ColdFusion Hosting >> >http://www.circa3k.com >> > >> >To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html >> >List Archive: >> >http://www.mail-archive.com/imail_forum%>40list.ipswitch.com/ >> > >> >Knowledge Base/FAQ: >> >http://www.ipswitch.com/support/IMail/ >> > >> > >> >> To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html >> List Archive: >> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ >> Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > >-- > >David M. Delbridge >Circa 3000 >ColdFusion Hosting >http://www.circa3k.com > >To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html >List Archive: >http://www.mail-archive.com/imail_forum%>40list.ipswitch.com/ > >Knowledge Base/FAQ: >http://www.ipswitch.com/support/IMail/ > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
