Re: Controlling Spam to the NOC

2002-06-27 Thread Karsten W. Rohrbach

Jeff Workman([EMAIL PROTECTED])@2002.05.23 16:41:08 +:
> 
> Hello,
> 
> Has anybody on this list figured out an effective way to eliminiate, or at 
> least severely limit, the amount of spam that arrives in your NOC?  I am 
> aware of solutions such as Spamassassin, Vipul's Razor, and the various RBL 
> lists, but has anybody used one of these solutions, or anything else, to 
> reduce the amount of spam going into noc@/trouble@/etc mailboxes without 
> severely restricting the rest of the internet's ability to reach the noc 
> via email for legitimate purposes?  Particularly in a NOC where it's quite 
> possible that some of your customers are listed in the RBLs but still need 
> to reach you.

TMDA as per-account or generic delivery filter (depending on your MTA
setup), with a whitelist of known customers (which should be easy to
derive from a CRM backend or customer address database and a few lines
of shell voodoo).

regards,
/k

-- 
WebMonster Community Project -- Reliable and fast since 1998 -- All on BSD
http://www.webmonster.de/ -- ftp://ftp.webmonster.de/ -- http://www.apache.de/
GnuPG:   0xDEC948A6 D/E BF11 83E8 84A1 F996 68B4  A113 B393 6BF4 DEC9 48A6
REVOKED: 0x2964BF46 D/E 42F9 9FFF 50D4 2F38 DBEE  DF22 3340 4F4E 2964 BF46
REVOKED: 0x4C44DA59 RSA F9 A0 DF 91 74 07 6A 1C  5F 0B E0 6B 4D CD 8C 44
My mail is GnuPG signed -- Unsigned ones are bogus -- http://www.gnupg.org/
Please do not remove my address from To: and Cc: fields in mailing lists. 10x



msg03077/pgp0.pgp
Description: PGP signature


Re: Controlling Spam to the NOC

2002-05-23 Thread jlewis


On Thu, 23 May 2002 [EMAIL PROTECTED] wrote:

> 
> You hit it dead on: use all the tools at your disposal, but preemptively
> "whitelist" your customers.  Unfortunately, the whitelisting isn't always as
> easy as it sounds.  If they are within your IP space, you're good to go, but
> if they have the rare portable block, or they are multihomed, etc., you need
> to be more careful.
> 
>
> In Short: Whitelist like crazy, and then blacklist like mad!

We do both...but I wouldn't say whitelist like crazy.  More like whitelist
as needed, and find a blacklist or one of the message body parsing utils
you like...or both.

For the rare emergency when a customer (or non-customer) needs to talk to
our NOC and can't get email through, we have these neat things called
telephones.  They work pretty well.  In fact, I think mine often works too
well.

-- 
--
 Jon Lewis *[EMAIL PROTECTED]*|  I route
 System Administrator|  therefore you are
 Atlantic Net|
_ http://www.lewis.org/~jlewis/pgp for PGP public key_




Re: Controlling Spam to the NOC

2002-05-23 Thread measl




You hit it dead on: use all the tools at your disposal, but preemptively
"whitelist" your customers.  Unfortunately, the whitelisting isn't always as
easy as it sounds.  If they are within your IP space, you're good to go, but
if they have the rare portable block, or they are multihomed, etc., you need
to be more careful.


In Short: Whitelist like crazy, and then blacklist like mad!

 On Thu, 23 May 2002, Jeff Workman wrote:

> Hello,
> 
> Has anybody on this list figured out an effective way to eliminiate, or at 
> least severely limit, the amount of spam that arrives in your NOC?  I am 
> aware of solutions such as Spamassassin, Vipul's Razor, and the various RBL 
> lists, but has anybody used one of these solutions, or anything else, to 
> reduce the amount of spam going into noc@/trouble@/etc mailboxes without 
> severely restricting the rest of the internet's ability to reach the noc 
> via email for legitimate purposes?  Particularly in a NOC where it's quite 
> possible that some of your customers are listed in the RBLs but still need 
> to reach you.
> 
> -Jeff
> 
> --
> Jeff Workman | [EMAIL PROTECTED] | http://www.pimpworks.org
> 

-- 
Yours, 
J.A. Terranson
[EMAIL PROTECTED]

If Governments really want us to behave like civilized human beings, they
should give serious consideration towards setting a better example:
Ruling by force, rather than consensus; the unrestrained application of
unjust laws (which the victim-populations were never allowed input on in
the first place); the State policy of justice only for the rich and 
elected; the intentional abuse and occassionally destruction of entire
populations merely to distract an already apathetic and numb electorate...
This type of demogoguery must surely wipe out the fascist United States
as surely as it wiped out the fascist Union of Soviet Socialist Republics.

The views expressed here are mine, and NOT those of my employers,
associates, or others.  Besides, if it *were* the opinion of all of
those people, I doubt there would be a problem to bitch about in the
first place...