Dave Long wrote: > a) filter by provenance, not by content > b) punish by wall-clock, not accept/reject > > That is, if one is accepting mail from a relay which one trusts to be > largely ham, let the TCP connection run full bore (or at least as fast
Let me introduce you to a fine little app called Turntide, that a few of my friends put together in 2003 or so. Symantec bought it. If I'm not mistaken, they quietly killed it off a while back. Botnets can scale massively, horizontally and it wasnt as effective against those as it was against large static spam sources, but .. srs