At 10:20 19-09-1997 +0200, Mickey Coggins wrote:
One thing we should keep in mind when implementing anti-spam solutions is to not try to solve the problem like was done with news.
Since people started rejecting massive cross-postings, the spammers just sent a new article to each of the groups. Most of the spam is binary pictures trying to attract people to their site, so the amount of news traffic skyrocketed with dozens of copies of the same stuff. Score: spammers 1 isps 0
Well, in this case and in what it concerns Esoterica, its spammers 0 - isp -1 We have a filter on incoming articles that not only detects ECP ( Excessive Crossposting) but also detects EMP (Excessive Multi Posting). By maintining a list of the last 5000 or 6000 articles, we can check using Subject, Lines and From headers if there's a repetition of the same article being sent to several newsgroups; if it is, we refuse the article. Since we're a node of Usenet II, this is indeed mandatory for the net.* hierarchy This filter is refusing something like 50000 articles per day. ( Does it show that I, as postmaster/newsmaster of Esoterica, have a thing with spammers ? I guess it does :-) C U! -- Mario Valente