Re: Outbound spam control

[Chris Edwards <chris () ENG GLA AC UK>]

On Tue, 13 Jun 2006, Graham Toal wrote:

| rate limiting on outgoing is probably the best bet; even if some
| slip by at a slow rate, you're unlikely to end up in a blacklist
| because of it.

Yup.  But also make sure alarms ring when outbound rate limits are
exceeded - in order to identify the boxes spamming out, as well as
throttling them.

And, Richard Clayton's paper:

      http://www.cl.cam.ac.uk/~rnc1/extrusion.pdf

suggests watching failure rates makes a better metric than simple
submission rate.


--
Chris Edwards, Glasgow University Computing Service