[Mimedefang] New spammer trick?

[Paul Heinlein]

On Wed, 26 Nov 2003, Jim McCullars wrote:

> > rr.com has been a singular pain the in butt in terms of spam for
> > me.
>
>    Same here.  Their security site claims that they scan customers
> for relay vulnerabilities, but we get spammed by them all the time.

I may be restating the obvious, but plenty of spam comes not from
misconfigured MTAs but from (Windows-based) trojans, spyware, or
malware that listen for their marching orders on ports other than
25/tcp.

IOW, a complete security scan requires poking at a bunch of ports,
a practice which most ISPs (and their clients) would consider too
intrusive.

-- Paul Heinlein <heinlein at cse.ogi.edu>