[91746] in North American Network Operators' Group
Re: ISP wants to stop outgoing web based spam
daemon@ATHENA.MIT.EDU (Peter Corlett)
Fri Aug 11 05:39:59 2006
In-Reply-To: <17627.40970.317841.151688@world.std.com>
From: Peter Corlett <abuse@cabal.org.uk>
Date: Fri, 11 Aug 2006 09:38:46 +0100
To: Barry Shein <bzs@world.std.com>
X-SA-Exim-Rcpt-To: nanog@merit.edu
X-SA-Exim-Mail-From: abuse@cabal.org.uk
Errors-To: owner-nanog@merit.edu
On 10 Aug 2006, at 22:07, Barry Shein wrote:
[...]
> The vector for these has been almost purely Microsoft Windows.
I wonder. From the point of view of a MX host (as opposed to a
customer-facing smarthost), would TCP fingerprinting to identify the
OS and apply a weighting to the spam score be a viable technique?
