[100372] in North American Network Operators' Group
Re: Misguided SPAM Filtering techniques
daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Mon Oct 22 13:49:19 2007
To: Al Iverson <aiversonlists@spamresource.com>
Cc: nanog list <nanog@nanog.org>
In-Reply-To: Your message of "Mon, 22 Oct 2007 11:30:27 CDT."
<7d6a0cac0710220930s517b1ad3s70c53dfa8a16469c@mail.gmail.com>
From: Valdis.Kletnieks@vt.edu
Date: Mon, 22 Oct 2007 13:26:48 -0400
Errors-To: owner-nanog@merit.edu
--==_Exmh_1193074008_3033P
Content-Type: text/plain; charset=us-ascii
On Mon, 22 Oct 2007 11:30:27 CDT, Al Iverson said:
> I log only valid domains used as the PRA or MFROM in the spam I
> receive, about 10k/day. Counting valid domains only, each domain is
> only seen on about three different spams, when averaged out. That's a
> hell of a lot of domains that actually exist, and I think a more
> accurate assumption is that a significant nonzero amount of that
> backscatter does actually reach a recipient mailbox on the other end.
It would be interesting to know how your numbers get changed if you look
for stuff sent with "domain tasting" domains. Sure, it was a valid domain -
for all of 48 hours before it got returned because it was starting to
"taste bad"....
--==_Exmh_1193074008_3033P
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001
iD8DBQFHHN1YcC3lWbTT17ARAu/GAJ90vhqNUFZm+IqfnAfqbhDm9ibN7wCgz85u
so9vXJ/OKZl4cxeD5u2Xflk=
=uqgI
-----END PGP SIGNATURE-----
--==_Exmh_1193074008_3033P--
