[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: SPAM fiiltering



On Thu, Oct 31, 2002 at 10:37:45PM -0800, Alvin Oga wrote:
> 
> hi paul
> 
> On Thu, 31 Oct 2002, Paul Johnson wrote:
> 
> > I also bounce mail based on the following DNSBL zones with great success.
> > 
> > relays.ordb.org (tested open relays)
> > orbs.dorkslayers.com (Dorkslayer's RBL)
> > relays.visi.com (More tested open relays)
> > postmaster.rfc-ignorant.org (Any site that refuses mail for "postmaster")
> > dsn.rfc-ignorant.org (Any site that refuses mail with From: <>)
> > abuse.rfc-ignorant.org (Any site that refuses mail for "abuse")
> > bl.spamcop.net (Spamcop's report-based RBL)
> > list.dsbl.org (One of the ORBS forks)
> > korea.services.net (All of Korea)
> > cn.rbl.cluecentral.net (All of China)
> > proxies.relays.monkeys.com (Open proxies)
> 
> and the rest of the rbls
>  	http://www.moensted.dk/spam/ - checks against 436 of um
> 	http://www.declude.com/junkmail/support/ip4r.htm  - 98 of um
> 
> sendmail w/ rbl
> 	http://www.Linux-Sec.net/Mail/rbl.gwif.html
> 
> more rbl howto
> 	http://basic.wirehub.nl/spamstats.html
> 

From my experience i would say: Do not use RBLs to reject mail, but to
tag it.

There have been several discussions in the LKML, and being the
postmaster of HispaLinux, the biggest Linux Association in Spain, I can
say that RBLs are no good.

RBLs are maintained by people who don't actually know who is a spammer
and who is not, and trusting them for the decision of who you should
accept and who you should reject is a broken thing from the very
begining.

My latest experience was the Helsinki University's computer department
rejecting a mail sent to them from the Helsinki Univ. of Technology.
When I sent a report from another domain (so it would not be rejected by
the missconfigured or bogus RBL entry) it was rejected because of being
tagged as spam by their spam filters.

Spam is a bad thing, but rejecting legitimate mail using third party
lists and rejecting (instead of tagging) spam with bogus spam tools is
even worst.

Cherrs,

-- 
Jesus Climent | Unix System Admin | Helsinki, Finland.
web: www.hispalinux.es/~data/  |  pumuki.hispalinux.es
------------------------------------------------------
Please, encrypt mail sent to me:   GnuPG ID:  86946D69
FP: BB64 2339 1CAA 7064 E429  7E18 66FC 1D7F 8694 6D69
------------------------------------------------------
Registered Linux user #66350 Debian 3.0 & Linux 2.4.20

A minute ago this was the safest job in the world. Now it's turning into 
a bad day in Bosnia.
		--Soap (Lock, Stock and Two Smoking Barrels)

Attachment: pgp9nCqnvgT0D.pgp
Description: PGP signature


Reply to: