> This brings to mind a technique with optional adaptive > delay - enabled by the user. Each mail is assigned a > 'triplicate'
http://projects.puremagic.com/greylisting/ Andrew 8) > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Mike Nice > Sent: Friday, October 14, 2005 12:43 PM > To: sniffer@SortMonster.com > Subject: Re: [sniffer] Large amounts of spam still getting through > > > getting much better at what they do. When a spammer uses Geocities > > links, hijacks real accounts on major providers to send > spam through, > > and changes their techniques every few hours, it makes it difficult > > for Sniffer to proactively block them, and the delay > between rulebase > > updates means a delay in catching things that have been tagged. > > This brings to mind a technique with optional adaptive > delay - enabled by the user. Each mail is assigned a > 'triplicate': (To_Email, From_Email, and > domain_of_sending_server). Previously unknown triplicates > are held for a period of time before being examined for spam. > The delay is long enough that SpamCop, Sniffer, and InvURIBL > mailtraps see copies of the spam and update the blacklists. > > This would be hard to do with the stock IMail, but > possibly could be done by Declude with the V3 architecture > and a database. > > It still doesn't provide a good answer to the problem of > spammers hijacking a computer and sending spam through > legitimate servers. > > > This E-Mail came from the Message Sniffer mailing list. For > information and (un)subscription instructions go to > http://www.sortmonster.com/MessageSniffer/Help/Help.html > This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
