SPAM Trap

[Charles Swiger]

On Dec 23, 2005, at 12:12 PM, Gerard Seibert wrote:
> I have been reading about SPAM Traps. Exactly what is a SPAM Trap?  
> I noticed that it seems to be used in conjunction with blacklisting  
> organizations.
>
> How would one go about setting up one?

The simplest case is to set up some email addresses on a website  
which point to a machine with no valid users, and then pay attention  
to any incoming mail and blacklist that traffic, ie, add the IP  
addresses of sending machines to a deny list like the access map, or  
feed the contents of such mail into SpamAssassin or other such tools  
which perform Bayesian text recognition.

Recently I'd written a Python program to generate such pages to try  
and pollute spam databases, which also helps against critters who  
scan websites and then launch dictionary attacks against user  
accounts via SSH and so forth.  It's here:

http://www.pkix.net/~chuck/strychnine.py

...and can be seen in operation here:

http://www.pkix.net/foo.asp

[ Or any URL that doesn't refer to a valid document, for that  
matter.  :-) ]

-- 
-Chuck