Hacker News new | ask | show | jobs
by Croak 75 days ago
One trick is having an tarpit email adress on your website. It is hidden using CSS so no real visitor sees it but it is visible in source. If your mail server recieves mail for that adress you can just block that IP for 24h.
2 comments

This sounds like bad advice and would result in blocking google and other major ESPs.

I occasionally get spam from people who took the time to create gmail accounts. Based on this advice, the honey pot email address would get spam from a Gmail account and your script would block Gmail servers.

There exist lists of email providers. Those you can whitelist, ie. they can't get on the blacklist. Even then they would only be blocked temporarily. There also exists postmaster@domain.com which should not filter at all. I am aware that you are able to abuse said system but if you monitor logs those issues would only be temporary.
Yeah, I mean, you can personally vet those domains/IPs?
Similar in spirit to this: https://www.projecthoneypot.org/