RE: [Assp-user] Suggestion: User-based tar-pit honey-pots against SPAM

[Lee N. <lk...@om...>]

Shawn-
Are you thinking of the honeynet project? 
This thread is right up their alley. The cool thing here is a plan to take
the results to build dynamic spam RBL type functionality.

Lee
-----Original Message-----
From: ass...@li...
[mailto:ass...@li...] On Behalf Of Shawn C. Masters
Sent: Sunday, February 15, 2004 11:06 AM
To: ass...@li...; pos...@po...
Subject: RE: [Assp-user] Suggestion: User-based tar-pit honey-pots against
SPAM

	There is another project that has been trying to do this (the name
currently escapes me), but what they found is that the spammer will do a few
test relays first before committing to the relay.  So to trap the spammers
they relay the first three or four messages and then tar pit the rest.  Of
course in this case how does this effects our CIDR blocks with things like
grey lists in ASSP?