Re: [exim] An interesting observation about spam zombies

Pàgina inicial
Delete this message
Reply to this message
Autor: Martin A. Brooks
Data:  
A: Marc Perkel
CC: exim-users
Assumpte: Re: [exim] An interesting observation about spam zombies
Marc Perkel wrote:
> My theort is that spam zombies do DNS caching so as to maximize spam
> output by eliminating dns lookups. Thus zombies retain old information
> far longer than they are supposed to.
>
> So I'm experimenting with a blaclisting trick where I change my fake
> high MX records, wait several hours, and then anything that hits the old
> fake MX records are spam zombies.


Your theory is flawed. Many many large ISPs ignore TTLs and
overagressively cache DNS records.

--

 Martin A. Brooks |  http://www.antibodymx.net/ | Anti-spam & anti-virus
    Consultant    |  martin@???      | filtering. Inoculate
  antibodymx.net  |  m: +447896578023           | your mail system.