[91785] in North American Network Operators' Group
Re: fingerprinting and spam ID
daemon@ATHENA.MIT.EDU (Petri Helenius)
Sat Aug 12 04:14:08 2006
Date: Sat, 12 Aug 2006 11:13:31 +0300
From: Petri Helenius <pete@he.iki.fi>
To: Ken Simpson <ksimpson@mailchannels.com>
Cc: nanog@merit.edu
In-Reply-To: <20060811161917.GC6775@mailchannels.com>
Errors-To: owner-nanog@merit.edu
Ken Simpson wrote:
>> The problem is that I already see enough legit mail hit the
>> quarantine due to being HTML/multipart, suspected of being sent
>> "direct-to-MX" due to Exchange's bizarre habit of not providing an
>> audit trail via Received headers, etc.
>>
>
> Of course by the time you can inspect the body of a message, it's
> already sucked down a large chunk of your resources. Host type is
> useful in pre-filtering even before you go so far as to send the
> banner -- to get rid of or at least slow down the crap that you almost
> certainly know is on its way.
>
>
The most precious resource for email is in most cases the time spent by
reading it. For spam this might not be too many seconds but it still
bothers the recipient unneccessarily.
Pete
