linux-kernel - Re: Postgrey experiment at VGER

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <458025A5.2070001@cateee.net>
Date:	Wed, 13 Dec 2006 17:09:09 +0100
From:	"Giacomo A. Catenazzi" <cate@...eee.net>
To:	linux-kernel@...r.kernel.org
Subject: Re: Postgrey experiment at VGER

Al Boldi wrote:
> Trond Myklebust wrote:
>> On Wed, 2006-12-13 at 11:25 +0200, Dumitru Ciobarcianu wrote:
>>> On Wed, 2006-12-13 at 01:50 +0200, Matti Aarnio wrote:
>>>> I do already see spammers smart enough to retry addresses from
>>>> the zombie machine, but that share is now below 10% of all emails.
>>>> My prediction for next 200 days is that most spammers get the clue,
>>>> but it gives us perhaps 3 months of less leaked junk.
> 
> Great!
> 
>>> IMHO this is only an step in an "arms race".
>>> What you will do in three months, remove this check because it will
>>> prove useless since the spammers will also retry ? If yes, why install
>>> it in the first place ?
>> Why ever do anything? You're going to die eventually anyway...
> 
> Right!  The problem here is that it may do more harm than good.
> 
> May I suggest a smarter way to filter these spammers, by just whitelisting 
> email addresses of valid posters, after sending a confirmation for the first 
> post.  Now if these spammers get smart, and start using personal email 
> addresses, I would certainly expect some real action by abused email address 
> owners.

So a challange to the kernel hackers: build a mail filtering/proxy 
system, a' la BSD.
I don't remember the specification and features, but IIRC the
netfilter is not enough to do the graylisting (but pf was).
Someone has some hints what kernel can do in the fight against
spam?

ciao
	cate
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/