<HTML><HEAD> <META content="text/html; charset=utf-8" http-equiv=Content-Type> <META name=GENERATOR content="IncrediMail 1.0"> <STYLE>v\:* { BEHAVIOR: url (#default#vml) } </STYLE> <style>v\:* { BEHAVIOR: url (#default#vml) } </style>  </HEAD> <BODY style="MARGIN: 5px 10px 10px; FONT-FAMILY: Arial; FONT-SIZE: 12pt" background="" scroll=yes bgColor=#ffffff> <TABLE id=INCREDIMAINTABLE border=0 cellSpacing=0 cellPadding=2 width="100%"> <TBODY> <TR> <TD style="DIRECTION: ltr; FONT-SIZE: 12pt" dir=ltr id=INCREDITEXTREGION width="100%"> <DIV style="FONT-FAMILY: Arial"><FONT size=2>Hi guys,</FONT></DIV> <DIV style="FONT-FAMILY: Arial"><FONT size=2></FONT> </DIV> <DIV style="FONT-FAMILY: Arial"><FONT size=2>Sorry, but I don't understand what kind of discussion is going on.</FONT></DIV> <DIV style="FONT-FAMILY: Arial"><FONT size=2>What do I have to do with it and why am I getting all these mails?</FONT></DIV> <DIV style="FONT-FAMILY: Arial"><FONT size=2>Please exclude me from the mailing list!</FONT></DIV> <DIV style="FONT-FAMILY: Arial"><FONT size=2><STRONG>Thanks!</STRONG></FONT></DIV> <DIV style="FONT-FAMILY: Arial"><FONT size=2></FONT> </DIV> <DIV id=INCREDISIGNATUREID> <DIV style="FONT-FAMILY: Times New Roman"><FONT size=2 face=Arial>Best regards,</FONT></DIV> <DIV style="FONT-FAMILY: Times New Roman"><FONT size=2 face=Arial><FONT color=#b70000>H</FONT>elmut</FONT></DIV> <DIV style="FONT-FAMILY: Times New Roman"><FONT color=#c0c0c0 size=2 face=Arial><STRONG>_______________________________________</STRONG></FONT></DIV></DIV> <DIV dir=ltr id=IncrediOriginalMessage><I>-------Originalmeddelande-------</I></DIV> <DIV> </DIV> <DIV id=receivestrings> <DIV style="FONT-SIZE: 11pt" dir=ltr><I><B>Från:</B></I> <A href="mailto:fweimer@bfk.de">Florian Weimer</A></DIV> <DIV style="FONT-SIZE: 11pt" dir=ltr><I><B>Datum:</B></I> 2009-03-04 12:11:06</DIV> <DIV style="FONT-SIZE: 11pt" dir=ltr><I><B>Till:</B></I> <A href="mailto:frank@powerweb.de">frank@powerweb.de</A></DIV> <DIV style="FONT-SIZE: 11pt" dir=ltr><I><B>Cc:</B></I> <A href="mailto:anti-abuse-wg@ripe.net">anti-abuse-wg@ripe.net</A></DIV> <DIV style="FONT-SIZE: 11pt" dir=ltr><I><B>Ämne:</B></I> Re: [anti-abuse-wg] how to detect spambots - SPAMTrusted</DIV></DIV> <DIV> </DIV> <DIV>* Frank Gadegast:</DIV> <DIV> </DIV> <DIV>> And the following makes me really crazy:</DIV> <DIV>> - preventing spambotted PCs from sending spam is SOOO easy</DIV> <DIV> </DIV> <DIV>The detection problem has been solved years ago, agreed. There are</DIV> <DIV>multiple, working solutions.</DIV> <DIV> </DIV> <DIV>> YES, its not only "likely", its prooven, spambots scan outlook address</DIV> <DIV>> books, and if the provider is only big enough (it works here for</DIV> <DIV>> only 10000 mailboxes) ...</DIV> <DIV>> ... SPAMBOTS USING YOUR DIAL-IN IPs DO SEND SPAM TO YOUR OWN MAILSERVERS !!!</DIV> <DIV> </DIV> <DIV>And even if that doesn't happen for you due to some strange scenario,</DIV> <DIV>there are tons of free, external data feeds to which you can subscribe</DIV> <DIV>which provide you with high-quality data about compromised customer</DIV> <DIV>PCs.</DIV> <DIV> </DIV> <DIV>> the customer phones up usally 5 minutes later, we can explain</DIV> <DIV>> and check the situation, he is cleaning his computer and</DIV> <DIV>> there is one spambotted PC less in the world.</DIV> <DIV> </DIV> <DIV>Cleaning up the PC costs between 100 and 200 EUR. Someone needs to</DIV> <DIV>absorb those costs.</DIV> <DIV> </DIV> <DIV>Detection is solved, but response is still an open problem.</DIV> <DIV> </DIV> <DIV>--</DIV> <DIV>Florian Weimer <<A href="mailto:fweimer@bfk.de">fweimer@bfk.de</A>></DIV> <DIV>BFK edv-consulting GmbH <A href="http://www.bfk.de/">http://www.bfk.de/</A></DIV> <DIV>Kriegsstraße 100 tel: +49-721-96201-1</DIV> <DIV>D-76133 Karlsruhe fax: +49-721-96201-99</DIV> <DIV> </DIV> <DIV> </DIV></TD></TR> <TR> <TD id=INCREDIFOOTER width="100%"> <TABLE cellSpacing=0 cellPadding=0 width="100%"> <TBODY> <TR> <TD width="100%"></TD> <TD id=INCREDISOUND vAlign=bottom align=middle></TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE></BODY></HTML>