[SLL] anyone use spam traps? (SMTP tarpits or bogus email addresses?)

[Brian C. Lane]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Bill Campbell wrote:
> On Thu, Feb 22, 2007, Jeremy C. Reed wrote:
>> Do any of you use spam traps? SMTP tarpits or bogus email addresses to 
>> catch spammers?
>>

I've never used a tarpit, but I used to have a whole domain (asmd.us)
dedicated to feeding spam into pyzor. It didn't really seem to be
effective so I've let it expire.

I have started using greylisting, which has cut down on the amount of
spam drastically. But not totally, since spammers can just as easily
setup postfix as anyone else.

> Here's the pertinent part of our postfix main.cf file which I find does a
> good job of limiting incoming spam with few false positives.  We do have to
> whitelist a few IP addresses each month where the DNS is set up poorly
> (e.g. it has no rDNS or the hostname returned by the rDNS returns a
> differnet IP address than the one connecting).

This can be a problem for legitimate systems, I've got a couple of
colocation places I work with that are using different IPs for incoming
and outgoing traffic, so rDNS doesn't match even though it is setup
correctly.

Brian

- --
- ---[Office 70.5F]--[Outside 33.8F]--[Server 88.6F]--[Coaster 71.4F]---
- ---[     WENATCHEE WSF (366749710) @ 47 36.1973 -122 26.2132      ]---
Software, Linux, Microcontrollers             http://www.brianlane.com
AIS Parser SDK                                http://www.aisparser.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)
Comment: Remember Lexington Green!

iD8DBQFF3wj7Iftj/pcSws0RAkZLAJ0dSxsNBC0tm6w3MnaQl93nOIo2NgCeIemA
N9FYz43iWCowyxoHXsW8rgM=
=+9F4
-----END PGP SIGNATURE-----