spam blocking honeypot

[Christopher Faylor]

It occurred to me last week that we are probably getting a lot of hits
from spammers who are scouring our web pages for things that look like
mailing lists and whaddaya know?  I was right.  We get quite a few
attempts to send email to 'themailinglistname@sources.redhat.com' and
'themailingilstname-unsubscribe@sources.redhat.com'.  We also get a lot
at 'be@sources.redhat.com'.  Not sure why, but it's easy enough to
detect.

So, I've taken the top 6 bounces and changed them into email aliases for
aaaspam.  That means that if anyone sends email to these aliases,
they'll be automatically detected and entered into the global deny list.
I am now seeing a much larger percentage of spam being caught in the
aaaspam archives.

It should be interesting to see if the number of messages blocked due
to a sender being in the black list now goes up.

cgf