The SMTP protocol requires that the connections be closed with a Quit command. Many spammers skip this step since closing the connection takes time and bandwidth. Some MTAs like Exim(Experimental Internet Mailer) are able to detect the use and no use of the Quit command they can track patterns of use for building DNSBLs
