On Wed, 30 Jul 2003 22:07:19 -0400
"Wil McGilvery" <[EMAIL PROTECTED]> wrote:

> Blocking domains doesn't really work. One of my customer's employees
> couldn't send mail to his house because his personal ISP was using RBL's and
> the work mail server ip was in an address block that had been listed. The
> employees personal ISP refused to let the mail through. (Get your IP off the
> list) and the business ISP couldn't or wouldn't get the address block off
> the list.

Sorry Wil, but it appears that there is a misconception here.  RBL's are
Server (IP ADDRESS) specific.  At least the ones worth using are.  Dialup RBLs
are different, but are a choice whether to use them or not.  Blocking whole
address ranges and blocking based on domain name have nothing to do with RBL's
if you select appropriate RBLs.  Again, the onus is on the administrator using
the RBL's to use them responsibly... kinda like Beer.  How many of you are
willing to give up your Beer because some idiots like to kill themselves or
other people when abusing it?
> 
> Our solution was to switch to a new ISP. (Someone else probably got the bad
> address).

Not a bad solution, so long as you exerted pressure on the ISP first and let
them know why you were leaving.  One key concept here is RESPONSIBLE INTERNET
CITIZENSHIP.  Consequences without explanation are like going home and
spanking your child without explaining what behavior caused you to punish
them.

> Blocking legitimate email can be worse for your business than the spam.

Again, your company gets to choose which RBL's to use.  Don't use Spews! (see
other post)

> We can't afford to have customers orders blocked and even though I do use
> RBL's, I spent a fair bit of time monitoring the system at the beginning to
> make sure we didn't miss anything and now all of our customers/vendors etc
> get whitelisted.
> 
> One idea that I like but has not gained much acceptance is the programs like
> TMDA where someone has to be on your whitelist before mail is accepted. A
> solution like this would only work if it was widely accepted and some easy
> yet secure method of getting added to the list was possible. (Maybe
> something similar to the way people sign up for user groups).

This solution doesn't scale.  What about new customers.  WhiteLists are worse
than blacklists!  Perhaps a SOHO can get away with them, but again, you are
allowing email only from a select few, and you have to maintain the list!

At least with RBL's there is cooperation over the Internet over which systems
are naughty and need to be blocked.  And you have a direct effect over that,
whether you are the BL'ed system or the one getting SPAM.

Power to the Intelligent and Knowledgible people!  Encourage people to
understand the world we live in, not just change the world for the dumbest
common denominator!  Microsoft has been trying that for years and look where
it got them... and us.  They keep making billions but the end users get crappy
software and stability/security problems

-- 
Matthew Carpenter 
[EMAIL PROTECTED]                          http://www.eisgr.com/

Enterprise Information Systems
* Network Service Appliances
* Network Consulting, Integration & Support
* Web Integration and E-Business
_______________________________________________
Linux-users mailing list
[EMAIL PROTECTED]
Unsubscribe/Suspend/Etc -> http://www.linux-sxs.org/mailman/listinfo/linux-users

Reply via email to