Messages in this thread | | | Date | Thu, 7 Sep 2006 09:01:23 -0500 (CDT) | From | Chase Venters <> | Subject | [OT] RE: bogofilter ate 3/5 |
| |
On Thu, 7 Sep 2006, Stuart MacDonald wrote:
> From: On Behalf Of Chase Venters >> You can check the From: or envelope sender against the subscriber >> database. Forgery isn't a concern because we're not trying to stop >> forgery with this method. Subscribers subscribing one address > > Forgery is always a concern... > >> The perl script behaves as an optional autoresponder. >> Autoresponders would >> respond to spam as well (well, unless you put a spam filter >> in front of >> them, but I assume that many don't). > > ..because autoresponders are always replying to forged addresses: > http://www.spamcop.net/fom-serve/cache/329.html > >> Also note that a number of people (myself included, at work >> anyway) have >> perl scripts that respond to all incoming mail and require a >> reply cookie from original >> envelope senders. We do it because it almost entirely >> prevents spam from >> arriving in our inboxes (I say almost because there is the occasional > > Autoresponder by another name, see above URL.
Fortunately, the bulk of bulk mail I receive these days is forged but not forged from legitimate users. To give you an example from my daily log (which is e-mailed to me so I can keep an eye on the insanity):
2006-09-06T06:25:11 -- Challenged 'Beliefnet Daily Inspiration <BeliefnetDailyInspiration@partner.beliefnet.com>' 2006-09-06T06:40:23 -- Challenged '"newsletters@frommers.com" <newsletters@frommers.com>' 2006-09-06T09:56:13 -- Challenged '"LexingtonLawBringsYou" <LexingtonLawBringsYou@deadchristmastree.net>' 2006-09-06T12:25:34 -- Challenged '"OFFER CONFIRMATION." <slt@protective-vehicle.com>' 2006-09-06T12:30:39 -- Challenged '"Rate Alert!" <LocalRate@requiredinstallation.com>' 2006-09-06T12:57:54 -- Challenged '"Rate Alert!" <LocalRate@wonderful-scholar.com>' 2006-09-06T12:57:56 -- Challenged '"OFFER CONFIRMATION." <slt@related-polymer.com>' 2006-09-06T13:08:02 -- Challenged '"PlatinumRewardsClubEmailOffers" <PlatinumRewardsClubEmailOffers@solitarygroup.com>' 2006-09-06T13:34:18 -- Challenged '"CellPhoneGiveawaysNetDeals" <CellPhoneGiveawaysNetDeals@hillbillymaryann.com>' 2006-09-06T13:39:23 -- Challenged '"Barber" <lpb@coveredrevenue.com>' 2006-09-06T13:59:36 -- Challenged '"Barber" <lpb@coveredrevenue.com>' 2006-09-06T14:08:44 -- Challenged '"LifeScript Healthy Advantage" <LifeScriptHealthyAdvantage@lifescript.com>' 2006-09-06T14:27:00 -- Challenged 'FS Report <freeinkplus@reply.mb00.net>' 2006-09-06T14:46:12 -- Challenged '"OFFER_C0NFIRMATI0N!" <ndc@differentirradiation.com>' 2006-09-06T15:07:26 -- Challenged '"Maureen&Team" <maureen@sdejwire.com>' 2006-09-06T15:07:27 -- Delivered message from 'Sune Kloppenborg Jeppesen <jaervosz@gentoo.org>' (whitelist) 2006-09-06T15:09:30 -- Challenged '"BHG.com Kitchen"<Recipe@email.bhg.com>' 2006-09-06T15:11:40 -- Challenged '"1 2 3 I n k Jets" <ikj@subsequent-grievance.com>'
If these challenges bounce (_many_ of them do), the box and host end up on the blacklist.
> ..Stu > >
Thanks, Chase - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |