funsec mailing list archives

Re: Why spam blacklisting isn't going to work anymore ...


From: der Mouse <mouse () rodents-montreal org>
Date: Sat, 16 Apr 2011 03:07:16 -0400 (EDT)

i agree for a reason not mentioned yet.  blackholing by source IP
hasn't worked for years

Works for me.  Indeed, one of today's better tools (Spamhaus's Zen
list) works exactly that way.

since so much spam is mixed in with non-spam from addresses like the
gmail and hotmail and aol servers which for business reasons noone is
comfortable blackholing.  the spammers won this round in 2002 or so.

Only for people who are willing to let them human-shields their way out
of the consequences of their antisocial behaviour.

Such people deserve all the spam consequences of such willingness.

also, the absence of a PTR RR or its presence having a specific
pattern is a better input to the filter than the recent reputation of
the ip address.

"X is better than Y" is not a reason to avoid using Y, not unless for
some reason you can't do both.  (Which may indeed be so for some
people, for example if you don't have the staff time to maintain both.)

/~\ The ASCII                             Mouse
\ / Ribbon Campaign
 X  Against HTML                mouse () rodents-montreal org
/ \ Email!           7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: