Re: introducing PolSpam

[Paweł Krawczyk <]

On Mon, Feb 18, 2002 at 08:51:54PM +0000, Mally Mclane wrote:

> If I understand you right, this database is the from: field only? I.e. I
> get spam from 'laaalaa@localhost, you block 'laaalaa@localhost
> Do you not think that most spam comes from fake from: addresses?

Yes, but if you get that fake address quickly enough, it gives you a very
good chance to block this particular mailing on your MTA. Of course,
it won't work if the spammer generates unique, fake From for *each*
copy of the spam, but it doesn't seem to be a very common practice.

Just to clarify, we consider adding Return-Path, From and Reply-To
addresses. Final decision is left to the admin.

-- 
Pawel Krawczyk
Krakow, POLAND
http://ipsec.pl/
http://ceti.pl/~kravietz/