Re: [mailop] Listbomb issue

2016-10-21 Thread Michael Ellis
> Didn't hit us very hard, but had a few clients affected. COI seems like > overkill to me here if all the other pieces are in place, which seems like > it would solve the list-bombing problem better. COI helps solve other > problems, and may also be worth doing, but may not be worth the cost. > >

Re: [mailop] Listbomb issue

2016-10-21 Thread Tim Starr
Didn't hit us very hard, but had a few clients affected. COI seems like overkill to me here if all the other pieces are in place, which seems like it would solve the list-bombing problem better. COI helps solve other problems, and may also be worth doing, but may not be worth the cost. -Tim On We

Re: [mailop] Listbomb issue

2016-10-21 Thread Vick Khera
On Fri, Oct 21, 2016 at 1:47 AM, Dave Warren wrote: > A random thought, would it also be worth evaluating IPs that are not > listed on a DUL as potential candidates? I realize DULs contain server > space and other stuff that doesn't send mail, but it seems to me that > most legitimate subscribers

Re: [mailop] Listbomb issue

2016-10-20 Thread Dave Warren
On Wed, Oct 19, 2016, at 13:27, Vick Khera wrote: > 1) Is the remote IP listed in CBL? Yes -> force CAPTCHA > 2) Is the remote IP listed in CleanTalk.org/blacklists? Yes -> force > CAPTCHA > 3) Is the remote IP listed in minFraud open proxies? Yes -> force CAPTCHA > > Then proceed with the normal

Re: [mailop] Listbomb issue

2016-10-19 Thread Franck Martin via mailop
This document can be of use: https://www.m3aawg.org/documents/en/maawg-vetting-best-common-practices-bcp Also, you may want to look at e-hawk.net On Wed, Oct 19, 2016 at 1:27 PM, Vick Khera wrote: > On Wed, Oct 19, 2016 at 3:35 PM, Brett Schenker > wrote: > > We're currently looking to impleme

Re: [mailop] Listbomb issue

2016-10-19 Thread Vick Khera
On Wed, Oct 19, 2016 at 3:35 PM, Brett Schenker wrote: > We're currently looking to implement a combination of preventions with the > leading idea being: > honeypot on sign up pages + IP intelligence + email address intelligence + > coi > > The idea being the honeypot will stop some bots, the IP m

Re: [mailop] Listbomb issue

2016-10-19 Thread Michael Wise via mailop
oft.com/en-us/download/details.aspx?id=18275> ? From: mailop [mailto:mailop-boun...@mailop.org] On Behalf Of Brett Schenker Sent: Wednesday, October 19, 2016 12:36 PM To: mailop@mailop.org Subject: [mailop] Listbomb issue We recently were tied up in the listbomb issue that's been plagui

Re: [mailop] Listbomb issue

2016-10-19 Thread Brett Schenker
Yeah, I know Spamhaus wants captcha + coi, but I'm getting pushback for a few reasons. 1) generally my employer thinks any slow in list growth is bad (don't get me started) 2) to implement captcha on the thousands of entry points would be a nightmare. Some of what I mentioned or modules provided by

Re: [mailop] Listbomb issue

2016-10-19 Thread Michael Ellis
> We recently were tied up in the listbomb issue that's been plaguing folks > for a while. For those that don't know what's going on, > https://wordtothewise.com/2016/08/subscription-bombing-esps-spamhaus/ > > I'm honestly surprised it's taken this long for us to wind up having a > listing for a cl

[mailop] Listbomb issue

2016-10-19 Thread Brett Schenker
We recently were tied up in the listbomb issue that's been plaguing folks for a while. For those that don't know what's going on, https://wordtothewise.com/2016/08/subscription-bombing-esps-spamhaus/ I'm honestly surprised it's taken this long for us to wind up having a listing for a client. That