 They went on to detail two active attacks (attacks that require feedback to the spammer) that were very effective against the spam filters.Of course, preventing any feedback to spammers (such as non-delivery reports, SMTP level errors or web bugs) defeats an active attack trivially.They also showed that retraining the filter was effective at preventing all the attack types, even when the retraining data had been poisoned.