On Tue, 22 Feb 2005 06:39:48 -0000, "Jim Webster"
wrote:

"Dave Ludlow" wrote in message
.. .

Well yes, that's what I did yesterday... but flicking through a block
of 10,000 headers say 20 at a time to see if there are any genuine
posts in there, would have been rather time consuming! I could have
deleted the lot but some genuine posts would have been lost with them.

that was what I found interesting. My machine is set under OE to just
download 300 at a time, and it was surprising how many of the real posts
turned up in the 300

Yes, we certainly don't want to lose the real posts.

I reported this to Claranet yesterday, too late in the day for much to
be done about it then but they replied to say they blocked some of the
sources and are monitoring for any recurrence.

Of course, as soon as countermeasures become effective, the flooder
will take a break or move elsewhere. I've suggested they implement
some kind of automatic monitoring at the News Service to flag sudden
increases in volume in the uk.* hierarchy - that shouldn't be at all
difficult to achieve.

--
Dave