Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Incidents
[Top] [All Lists]

Re: Massive SPAM Increase

Subject: Re: Massive SPAM Increase
Date: Tue, 17 Oct 2006 14:33:54 +1300
On 17/10/06, gabriel rosenkoetter <gr@eclipsed.net> wrote:
On Sat, Oct 14, 2006 at 12:17:51PM -0500, Paul Schmehl wrote:
> It appears that what you're missing is that this one "flaw" is not enough
> to get mail rejected by policyd-weight.

What you're missing is that the assumption that systems sending
valid mail will always (or even will usually) be listed in DNS is
fundamentally wrong and should never be used even as a weighted
guess to indicate spam.

Well, they may be listed in SPF records, though I agree not in MX.

And by itself, I don't believe SPF provides a useful indication one
way or the other as to whether a message is spam or not.  Lots of
spammers set up SPF records these days.

cheers,
Jamie
--
Jamie Riden, CISSP / jamesr@europe.com / jamie.riden@gmail.com
NZ Honeynet project - http://www.nz-honeynet.org/

------------------------------------------------------------------------------
This List Sponsored by: Black Hat

Attend the Black Hat Briefings & Training USA, July 29-August 3 in Las Vegas. World renowned security experts reveal tomorrow's threats today. Free of vendor pitches, the Briefings are designed to be pragmatic regardless of your security environment. Featuring 36 hands-on training courses and 10 conference tracks, networking opportunities with over 2,500 delegates from 40+ nations.

http://www.blackhat.com
------------------------------------------------------------------------------

<Prev in Thread] Current Thread [Next in Thread>