[37812] in North American Network Operators' Group
Re: Stealth Blocking
daemon@ATHENA.MIT.EDU (Eric A. Hall)
Thu May 24 15:01:40 2001
Message-ID: <3B0D4E70.A34596B@ehsco.com>
Date: Thu, 24 May 2001 11:09:52 -0700
From: "Eric A. Hall" <ehall@ehsco.com>
MIME-Version: 1.0
To: Valdis.Kletnieks@vt.edu
Cc: nanog@merit.edu
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Errors-To: owner-nanog-outgoing@merit.edu
> Remember that the spammer is handing the "open" relay one piece of
> mail with zillions of RCPT TO:s - rate limiting the outbound just
> means that the zillions of recipients sit in *your* queue that much
> longer.
I will add "further punishes/diminishes the harm of open relays" to the
"pro" column. ;)
> I have heard from multiple sources that the spammers are well clued
> enough to utilize multiple relays in parallel - if you rate limit to
> 1/N of bandwidth, they just use N relays at the same time.
If the rate limit is applied to *:25, then the *MORE* relays the spammer
uses, the longer it takes for him to do it.
--
Eric A. Hall http://www.ehsco.com/
Internet Core Protocols http://www.oreilly.com/catalog/coreprot/
