DCC as outbound bulk detector?

Vernon Schryver vjs@calcite.rhyolite.com
Sat Apr 17 00:02:53 UTC 2004


> From: Kelsey Cummings 

> Has anyone tried using DCC to monitor outbound email flows for SPAM?
> Presumably, a private server mesh could be built for all outbound server
> and if you don't outright start rejecting mail, it could notify your abuse
> desk of a potential problem.

Starting a couple years ago and continuing for at least a year or
so and perhaps even now, a very large Far Eastern free and for-hire
mail provider was using the DCC to detect and perhaps squelch
outgoing bulk mail.

After running without rejecting for a few weeks while building a
whitelist of legitimate internal bulk mail sources such as mailing
lists, why not reject?  Tell users that if they want to set up a mailing
list or do some "push advertising" that they need to contact the NOC
or Abuse Desk first.  You might pitch it as insurance against the
entire organization getting blacklisted as the result of a user mistake.


Vernon Schryver    vjs@rhyolite.com



More information about the DCC mailing list

Contact vjs@rhyolite.com by mail or use the form.