HP3000-L Archives

May 2003, Week 2

HP3000-L@RAVEN.UTC.EDU

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
Greg Stigers <[log in to unmask]>
Reply To:
Date:
Fri, 9 May 2003 12:24:52 -0400
Content-Type:
text/plain
Parts/Attachments:
text/plain (40 lines)
> "A system that backers claim will eliminate e-mail spam is about
> to be deployed by a major Internet service provider,

I think that the only way spam will dwindle is if the ISPs get involved.
That said, I do not think that this is a good approach. It certainly is not
a good approach for everyone. There are already means for the email
recipient to 'whitelist' those whose mail they wish to receive. The
difference being that Earthlink will shift that onus on to the sender.

I also think that content-filtering is a losing bet, if the spam I receive
now is any indication. There are just too many ways to munge words, or talk
around the topic. I am unwilling to filter out anything containing the word
"mortgage", for instance, since that words has several uses outside of the
wonderful world of refinancing mine. With apologies to Yosef, I'm not that
hardcore.

For filtering, the goldmine seems to be the headers. Bogus and broken
headers remains suspect. I think that relay block lists are generally a good
idea; I get more spam thru open relays than I get legitimate email from
companies who also happen to have an open relay. Another approach that I
like is explained at <http://www.rfc-ignorant.org>. And is it impractical to
connect back to the apparently originating server, and confirm that the
address is valid? Sure, that increases network traffic and email server
load, and lets spam from major spamhausen thru, but it should stop spam from
those who forge their originating address.

It's still too early for me to say how well this spamcop is working for me,
at least not long-term, since I have had it for only two months now. But I
believe that I have received only three or four spam, all "intercepted", in
that two months. It's a refreshing change. Of course, since I have
deprecated my old address, I am probably losing some legitimate email in the
500 odd pieces of email I have received at that address since the first of
the month.

Greg Stigers
http://www.cgi.com

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *

ATOM RSS1 RSS2