linux-kernel - Re: Postgrey experiment at VGER

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-id: <200612131037.12592.gene.heskett@verizon.net>
Date:	Wed, 13 Dec 2006 10:37:12 -0500
From:	Gene Heskett <gene.heskett@...izon.net>
To:	linux-kernel@...r.kernel.org
Cc:	Al Boldi <a1426z@...ab.com>
Subject: Re: Postgrey experiment at VGER

On Wednesday 13 December 2006 09:11, Al Boldi wrote:
>Trond Myklebust wrote:
>> On Wed, 2006-12-13 at 11:25 +0200, Dumitru Ciobarcianu wrote:
>> > On Wed, 2006-12-13 at 01:50 +0200, Matti Aarnio wrote:
>> > > I do already see spammers smart enough to retry addresses from
>> > > the zombie machine, but that share is now below 10% of all emails.
>> > > My prediction for next 200 days is that most spammers get the
>> > > clue, but it gives us perhaps 3 months of less leaked junk.
>
>Great!
>
>> > IMHO this is only an step in an "arms race".
>> > What you will do in three months, remove this check because it will
>> > prove useless since the spammers will also retry ? If yes, why
>> > install it in the first place ?
>>
>> Why ever do anything? You're going to die eventually anyway...
>
Some of sooner than others, since we're well on the way anyway. :)

>Right!  The problem here is that it may do more harm than good.
>
>May I suggest a smarter way to filter these spammers, by just
> whitelisting email addresses of valid posters, after sending a
> confirmation for the first post.  Now if these spammers get smart, and
> start using personal email addresses, I would certainly expect some
> real action by abused email address owners.

This one I second wholeheartedly.  Because its entirely possible that my 
isp's server will not retry, but will probably spend the next 3 days 
emailing me failure notices every 3 hours or so.  They also have their 
own blacklist for incoming that I've had to bitch about, at length 
because the only way to get around it is to change my email address to a 
special one they maintain.   Theres only one fly in that solution that 
makes the soup unpalatable, I can't send using that address in my headers 
as its an unknown user error to their outgoing.verizon.net servers .  I'm 
on vz, go figure.

My first reply since, so this is a test of sorts.

>
>Thanks!
>
>--
>Al
>
>-
>To unsubscribe from this list: send the line "unsubscribe linux-kernel"
> in the body of a message to majordomo@...r.kernel.org
>More majordomo info at  http://vger.kernel.org/majordomo-info.html
>Please read the FAQ at  http://www.tux.org/lkml/

-- 
Cheers, Gene
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Yahoo.com and AOL/TW attorneys please note, additions to the above
message by Gene Heskett are:
Copyright 2006 by Maurice Eugene Heskett, all rights reserved.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/