Marcus Watts (mdw@umich.edu)
Wed, 16 Sep 98 15:56:01 -0400
Greg Noel writes:
> I've sent mail to the postmaster at toad.com asking if they could adopt
> filtering based upon the MAPS RBL, but so far have received no response.
> I assume it's technically feasible---the latest sendmail already has the
> support as an option---but I don't know if there are any political issues
> that would make it impossible.
The times previous that I've looked at RBL, they never have any of the
sites listed that I see spam coming from.
Hm, looking at recent spam sent to CodherPlunks, I see:
IPaddr(dns) hit in RBL?
38.149.25.253(gate2.t10.net) YES
195.63.0.12(mail.astat.de) YES
38.149.25.253 YES (this is a duplicate)
168.191.28.172(sdn-ar-001ohdaytP306.dialsprint.net) NOPE
207.82.250.50(f39.hotmail.com) NOPE
Actually, I'm amazed. It's the first time I've ever seen any hits
from RBL. I don't think it will really stop any serious spammer, but
it might slow it down a *little*. However, it certainly won't help
at all with spam sent from hotmail, dialsprint, etc.
Another even simplier approach that might be worth doing also is
to reject any mail sent to CodherPlunks that doesn't have the
word "coderpunk" (ignoring case) in the To: header field.
This will reject spam with to fields such as "(Dear Friend)",
"scgtf@hotmail.com", "<bill301@success600.com>", etc., which
at least judging by recent spam sent the list, would give it
an even better hit ratio. I don't think this will much interfer
with legitimate use of the CodherPlunks list, but it does put a big
kink in most spam software, which expects to send the same canned
message to many recipients at once (and hence can't send a customized
To: field.)
-Marcus Watts
UM ITD PD&D Umich Systems Group
The following archive was created by hippie-mail 7.98617-22 on Sat Apr 10 1999 - 01:13:59