Re: ISP wants to stop outgoing web based spam

[Peter Corlett <abuse () cabal org uk>]

On 10 Aug 2006, at 22:07, Barry Shein wrote:
[...]
> The vector for these has been almost purely Microsoft Windows.

I wonder. From the point of view of a MX host (as opposed to a  
customer-facing smarthost), would TCP fingerprinting to identify the  
OS and apply a weighting to the spam score be a viable technique?