Hacker News new | ask | show | jobs
by sheikheddy 907 days ago
Oh man I think around 2 years ago there was a 3x spike in Europe outbound spam and the fraud team had to disable like 200k+ tenants from some shady cloud VPS. We didn’t have a long term plan for the abuse back then besides playing whack-a-mole, and if we have one now, I haven’t heard of it.

Dumb question, but wtf is the solution even? I’m confused about what you expect us to do. I haven’t thought about the problem much so I might be missing some obvious Pareto improvement.
1 comments
Dylan16807 907 days ago
Did I accidentally give the impression I have a particularly good solution to spam in mind? I don't.

My main suggestion here is just that an established reputation for a specific IP/domain should override the reputation of the IP block it's inside of.

link
sheikheddy 907 days ago
You didn’t make any mistakes encoding, I just screwed up my decoding, it happens :D

Thanks for clarifying, ok, hmm… that seems hard to do if you can check the IP block by using a subnet mask but the specific IP isn’t resolved until later in mailflow. It might not actually work like that in… ProtocolFilterHub? I always get this mixed up, wait… I think this might be something that we are already working on. And have been working on for a while, wow. Looks hairy. It’s stuck since the guy working on it transferred to another team, and no one picked it up, but some PM noticed before I did and put it up for vote in semester planning. Always creepy to see engineers get referred to as “resources”.

link