Re: Recent fun on Debian-Security

2002-07-22 Thread Fabien Penso

Sat, 20 Jul 2002 09:38:44 +0200, tu as dit : 

 > Le Friday 19 July 2002 à 13:08:07 -0400, Phillip Hofmeister a écrit:

[...]

 > Sush a system of real-time blacklist mainted by email already exist for
 > french users, see http://perso.linuxfr.org/nospam/spam.html. A robot is
 > listening an email address, it receives GPG signed emails with copies of
 > spam mail and command to add an email or a domain in the blacklist.
 > Anyone can listen to the list and reproduce the robot actions on it own
 > MTA access files or regulary download the files directly on
 > http://perso.linuxfr.org/nospam/user.txt and
 > http://perso.linuxfr.org/nospam/domain.txt.

 > Maybe this robot could be reused, see with [EMAIL PROTECTED]

Hi.

I can give away the sources of the perl robot which does that. Simple,
you do add the name which appear in the gpg key, then people sign the
message with a command to add / remove an entry.

Mail me if you are interested.

-- 
Fabien Penso <[EMAIL PROTECTED]> | LinuxFr a toujours besoin de :
http://perso.LinuxFr.org/penso/  | http://linuxFr.org/dons/


pgppL09DIlCqW.pgp
Description: PGP signature


Re: Recent fun on Debian-Security

2002-07-20 Thread Loic Le Loarer
Le Friday 19 July 2002 à 13:08:07 -0400, Phillip Hofmeister a écrit:
> One thought that occured to me is to recruit volunteers for spam-prone lists
> that would have real-time blacklists capabilities.  Someone could log into a
> system and say "Add this address to the list's blacklist".  This could be
> accomplished via sudo (to run the script as a user /w privlidges to the
> blacklist) and a well written perl script.  If the consensus is hat this would
> be a good and implementable idea then I can write the perl script.  I would
> also volunteer to monitor the lists I am on...

Hy,

Sush a system of real-time blacklist mainted by email already exist for
french users, see http://perso.linuxfr.org/nospam/spam.html. A robot is
listening an email address, it receives GPG signed emails with copies of
spam mail and command to add an email or a domain in the blacklist.
Anyone can listen to the list and reproduce the robot actions on it own
MTA access files or regulary download the files directly on
http://perso.linuxfr.org/nospam/user.txt and
http://perso.linuxfr.org/nospam/domain.txt.

Maybe this robot could be reused, see with [EMAIL PROTECTED]

-- 
Loic

"heaven is not a place, it's a feeling"


pgpCYEXwPPaHl.pgp
Description: PGP signature


Recent fun on Debian-Security

2002-07-19 Thread Phillip Hofmeister
I was thinking of possible solutions to avoid our recent fun on debian-security
with mail bombings...

[EMAIL PROTECTED]:~$ cat /var/log/exim/mainlog.0 | grep debian-security | grep 
\<\= | wc -l
 80 <-mail list subscribe-bomb
[EMAIL PROTECTED]:~$ cat /var/log/exim/mainlog | grep debian-security | grep 
\<\= | wc -l
  4
[EMAIL PROTECTED]:~$ cat /var/log/exim/mainlog | grep debian-devel | grep \<\= 
| wc -l
 29
[EMAIL PROTECTED]:~$ cat /var/log/exim/mainlog.0 | grep debian-devel | grep 
\<\= | wc -l
 40


See above...

One thought that occured to me is to recruit volunteers for spam-prone lists
that would have real-time blacklists capabilities.  Someone could log into a
system and say "Add this address to the list's blacklist".  This could be
accomplished via sudo (to run the script as a user /w privlidges to the
blacklist) and a well written perl script.  If the consensus is hat this would
be a good and implementable idea then I can write the perl script.  I would
also volunteer to monitor the lists I am on...

Regards,
-- 
Phil

PGP/GPG Key:
http://www.zionlth.org/~plhofmei/
wget -O - http://www.zionlth.org/~plhofmei/ | gpg --import


pgpJA1UqFuBO7.pgp
Description: PGP signature