Re:Implementing fast TCP fingerprinting with eBPF
by jeffbee on Sunday June 29, 2025 @04:25PM
(#44416130)
Regular users retry, that's the point of temp-fail on first attempt. Botnets never retry because they aren't real mailers with send queues. And the number of people who have ever intentionally operated a mailer from a Windows XP box on a residential ADSL line is very accurately approximated by zero.
You can stop spam, but you will also stop regular uesrs, and that is the problem. Your classifier is not as powerfully accurate as you think.
If you don't want to put something online, then don't put it online!