lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20061004224154.GC16812@stusta.de>
Date:	Thu, 5 Oct 2006 00:41:54 +0200
From:	Adrian Bunk <bunk@...sta.de>
To:	Linus Torvalds <torvalds@...l.org>
Cc:	Alan Cox <alan@...rguk.ukuu.org.uk>,
	"Martin J. Bligh" <mbligh@...igh.org>,
	Lee Revell <rlrevell@...-job.com>,
	Matti Aarnio <matti.aarnio@...iler.org>,
	linux-kernel <linux-kernel@...r.kernel.org>
Subject: Re: Spam, bogofilter, etc

On Mon, Oct 02, 2006 at 11:02:36AM -0700, Linus Torvalds wrote:
> 
> 
> On Mon, 2 Oct 2006, Alan Cox wrote:
> >
> > Ar Llu, 2006-10-02 am 09:40 -0700, ysgrifennodd Linus Torvalds:
> > > If you want a yes/no kind of thing, do it on real hard issues, like not 
> > > accepting email from machines that aren't registered MX gateways. Sure, 
> > > that will mean that people who just set up their local sendmail thing and 
> > > connect directly to port 25 will just not be able to email, but let's face 
> > > it, that's why we have ISP's and DNS in the first place.
> > 
> > Except most of the ISPs are incompetent and many people have to run
> > their own mail system in order to get mail that actually *works*. I've
> > had that experience several times, although thankfully I now have a sane
> > ISP.
> 
> Sure. I kind of agree - I'm just saying that if you have a _hard_ 
> decision, you should base in on _hard_ data. 
>...

My personal hard data is:
- if you are sending emails to me, the fourth-last mail server in the
  path (the one that actually receives the emails from the Internet)
  does greylisting, IOW much spam that can be trivially determined is
  already eliminated when bogofilter gets the emails
- much spam I'm getting cames through lists like linux-kernel that
  have already filtered out the easy to determine spam
- despite these points, bogofilter catches 90% of the arriving spam
- one false positive every 1-2 years (sic)
- I can (and do) train bogofilter myself

It might have it's weaknesses and might therefore not work well forever,
but at least during the last years bogofilter served me well. 

> 		Linus

cu
Adrian

-- 

       "Is there not promise of rain?" Ling Tan asked suddenly out
        of the darkness. There had been need of rain for many days.
       "Only a promise," Lao Er said.
                                       Pearl S. Buck - Dragon Seed

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ