North American Network Operators Group Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical Re: Response from Cyber Promotions (fwd)
On Mon, 21 Apr 1997, Doug McIntyre wrote: > But most of the bulk spammer programs out there don't follow MX > records. They blast directly into the sendmail port of the primary > machine, and if they can't do that, they leave it at that and move > on.. Blocking spam sites directly at the sendmail level (with > tcp_wrappers), does effectively block out bad domains. You sure about not following MX'? There is a machine, 'isi.net', but it doesn't accept mail, and there's an MX pointing to out real mail machine, yet we constantly get spam :-) Otherwise everyone would've used this trick to avoid spam :) Some of the sendmail rules listed at http://spam.abuse.net/spam/, like the one that forces the MAIL FROM line to actually resolve, would probably block a lot of spam, too. But I was wondering if this requires the address to have an A record, or will an MX suffice; I know lots of people that send as "[email protected]" where domain.com is an MX only... I'm just not familiar enough with sendmail rules to know how it works ;-) If Cyberpromo were really trying to *cough* help, they would set all the reply-to's in the spams to "[email protected]" ;-) yeah... right... -Taner -- D. Taner Halicioglu [email protected] Programmer/Engineer/Sysadmin Internet Systems, Inc. Voice: +1 408 543 0313 Fax: +1 408 541 9878 PGP Fingerprint: 65 0D 03 A8 26 21 6D B8 23 3A D6 67 23 6E C0 36 - - - - - - - - - - - - - - - - -
|