Misguided SPAM Filtering techniques

Mon Oct 22 17:26:48 UTC 2007

On Mon, 22 Oct 2007 11:30:27 CDT, Al Iverson said:

> I log only valid domains used as the PRA or MFROM in the spam I
> receive, about 10k/day. Counting valid domains only, each domain is
> only seen on about three different spams, when averaged out. That's a
> hell of a lot of domains that actually exist, and I think a more
> accurate assumption is that a significant nonzero amount of that
> backscatter does actually reach a recipient mailbox on the other end.

It would be interesting to know how your numbers get changed if you look
for stuff sent with "domain tasting" domains.  Sure, it was a valid domain -
for all of 48 hours before it got returned because it was starting to
"taste bad"....
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20071022/8aebc242/attachment.sig>