lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <20130306124057.GA8456@gremlin.ru>
Date: Wed, 6 Mar 2013 16:40:57 +0400
From: gremlin@...mlin.ru
To: full-disclosure@...ts.grok.org.uk
Subject: Re: Get rid of french marketing spam

On 06-Mar-2013 11:52:59 +0100, Arnaud Jacques wrote:

 > Are you filtering your emails with Clamav? Get rid of french
 > marketing spam. It's free.

The ostrich-style technique of getting the message and then silently
killing it can lead only to increasing number of spam messages: once
you accept the message (issuing the SMTP 354 code in reply to the
DATA command), spammers get a confirmation that the address they are
sending to is alive, and will send more and more. When you respond
with 550, they don't.

For ClamAV, its' primary task is to check whether executable (in wide
sence) attachments contain something dangerous. Using it for checking
all the messages is just an ineffective waste of resources...


-- 
Alexey V. Vissarionov aka Gremlin from Kremlin <gremlin ПРИ gremlin ТЧК ru>
GPG key ID: 0xEF3B1FA8, keyserver: hkp://subkeys.pgp.net
GPG key fingerprint: 8832 FE9F A791 F796 8AC9 6E4E 909D AC45 EF3B 1FA8

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ