FYI: new mailing list anti-spam measures

classic Classic list List threaded Threaded
8 messages Options
Reply | Threaded
Open this post in threaded view
|

FYI: new mailing list anti-spam measures

Todd C. Miller
The mailing list server is now using several blacklists from the
SORBS project (http://www.sorbs.net) to prevent spam.  So far it
is using the SORBS zombie, spam, web form and dialup blacklists.

This does mean that people sending mail from a dynamic IP address
(cable modem, dynamic DSL or dialup) will need to relay messages
through their ISP's mail server.  This will probably have the biggest
impact on cable modem users running their own SMTP servers.

 - todd

Reply | Threaded
Open this post in threaded view
|

Re: FYI: new mailing list anti-spam measures

J Moore
On Thu, Nov 03, 2005 at 04:13:50PM -0500, the unit calling itself Todd C. Miller wrote:
> The mailing list server is now using several blacklists from the
> SORBS project (http://www.sorbs.net) to prevent spam.  So far it
> is using the SORBS zombie, spam, web form and dialup blacklists.
>
> This does mean that people sending mail from a dynamic IP address
> (cable modem, dynamic DSL or dialup) will need to relay messages
> through their ISP's mail server.  This will probably have the biggest
> impact on cable modem users running their own SMTP servers.

Well, let's see if this affects me...

Reply | Threaded
Open this post in threaded view
|

Re: FYI: new mailing list anti-spam measures

Gareth-2
On Saturday 05 November 2005 04:35 pm, J Moore wrote:
> On Thu, Nov 03, 2005 at 04:13:50PM -0500, the unit calling itself Todd C.
Miller wrote:

> > The mailing list server is now using several blacklists from the
> > SORBS project (http://www.sorbs.net) to prevent spam.  So far it
> > is using the SORBS zombie, spam, web form and dialup blacklists.
> >
> > This does mean that people sending mail from a dynamic IP address
> > (cable modem, dynamic DSL or dialup) will need to relay messages
> > through their ISP's mail server.  This will probably have the biggest
> > impact on cable modem users running their own SMTP servers.
>
> Well, let's see if this affects me...

Testing........

I use an SMTP server at home

Reply | Threaded
Open this post in threaded view
|

Re: FYI: new mailing list anti-spam measures

J Moore
In reply to this post by Todd C. Miller
On Thu, Nov 03, 2005 at 04:13:50PM -0500, the unit calling itself Todd C. Miller wrote:

> The mailing list server is now using several blacklists from the
> SORBS project (http://www.sorbs.net) to prevent spam.  So far it
> is using the SORBS zombie, spam, web form and dialup blacklists.
>
> This does mean that people sending mail from a dynamic IP address
> (cable modem, dynamic DSL or dialup) will need to relay messages
> through their ISP's mail server.  This will probably have the biggest
> impact on cable modem users running their own SMTP servers.
>
>  - todd

Begging your pardon, sir, but are you sure this is a "good thing" to do?
SORBS appears to be somewhat hostile, requiring "registration" even to
check whether or not your IP address is listed. Furthermore, if you
check the spam list at www.dnsstuff.com, they indicate that the
"dial-up" list should not be used.

I assume you have implemented this because you feel spam on the list has
reached an unacceptable level?

Respectfully,
J

Reply | Threaded
Open this post in threaded view
|

Re: FYI: new mailing list anti-spam measures

Todd C. Miller
In reply to this post by Todd C. Miller
After talking to some folks who would be negatively impacted by
this I've decided to drop the dial-ups blacklist and hope that
greylisting catches the bulk of the spam (which for most compromised
windows hosts is the case).

 - todd

Reply | Threaded
Open this post in threaded view
|

Re: FYI: new mailing list anti-spam measures

beck-7
In reply to this post by Todd C. Miller
        This is horseshit. the SORBS dialup list is inaccurate as hell.
it includes my legitimately purchased static business IP's. They are not
dialups, and it is impossible to get SORBS to correct it. It also includes
my ISP's mail server, and in any case relaying mail through a smarthost
such as my isp's mail server negates the benefit I pay for by running
my own to ensure that TLS end to end keeps conversations between myself
and other developers on OpenBSD-to-OpenBSD and not trivally likeley to
be sniffed and archived.

        This is throwing out the baby with the bathwater, and IMO,
unneccesary.

        -Bob

* Todd C. Miller <[hidden email]> [2005-11-03 14:32]:

> The mailing list server is now using several blacklists from the
> SORBS project (http://www.sorbs.net) to prevent spam.  So far it
> is using the SORBS zombie, spam, web form and dialup blacklists.
>
> This does mean that people sending mail from a dynamic IP address
> (cable modem, dynamic DSL or dialup) will need to relay messages
> through their ISP's mail server.  This will probably have the biggest
> impact on cable modem users running their own SMTP servers.
>
>  - todd

Reply | Threaded
Open this post in threaded view
|

Re: FYI: new mailing list anti-spam measures

beck-7
In reply to this post by Todd C. Miller
        Thank you.

        -Bob


* Todd C. Miller <[hidden email]> [2005-11-06 07:28]:
> After talking to some folks who would be negatively impacted by
> this I've decided to drop the dial-ups blacklist and hope that
> greylisting catches the bulk of the spam (which for most compromised
> windows hosts is the case).
>
>  - todd

Reply | Threaded
Open this post in threaded view
|

Re: FYI: new mailing list anti-spam measures

Allie D
In reply to this post by beck-7
I've had good results using Spamhaus XBL/SBL...if you want to be
aggressive use Spews level 2.


On Tue, November 8, 2005 08:38, Bob Beck wrote:

> This is horseshit. the SORBS dialup list is inaccurate as hell.
> it includes my legitimately purchased static business IP's. They are not
> dialups, and it is impossible to get SORBS to correct it. It also includes
> my ISP's mail server, and in any case relaying mail through a smarthost
> such as my isp's mail server negates the benefit I pay for by running
> my own to ensure that TLS end to end keeps conversations between myself
> and other developers on OpenBSD-to-OpenBSD and not trivally likeley to
> be sniffed and archived.
>
> This is throwing out the baby with the bathwater, and IMO,
> unneccesary.
>
> -Bob
>
> * Todd C. Miller <[hidden email]> [2005-11-03 14:32]:
>> The mailing list server is now using several blacklists from the
>> SORBS project (http://www.sorbs.net) to prevent spam.  So far it
>> is using the SORBS zombie, spam, web form and dialup blacklists.
>>
>> This does mean that people sending mail from a dynamic IP address
>> (cable modem, dynamic DSL or dialup) will need to relay messages
>> through their ISP's mail server.  This will probably have the biggest
>> impact on cable modem users running their own SMTP servers.
>>
>>  - todd