Re: autowhitelister for spamd needs testing

2009-04-24 Thread Gregory Edigarov
Aaron Mason wrote: On Fri, Apr 24, 2009 at 11:01 AM, Dan Harnett dan...@harnett.name wrote: On top of that, if VeriSign could be tricked into signing a fake Microsoft ActiveX key, can you really trust the authorities? Are you implying SPF records are validated somewhere and signed by

Re: autowhitelister for spamd needs testing

2009-04-24 Thread Dan Harnett
On Fri, Apr 24, 2009 at 02:16:57PM +1000, Aaron Mason wrote: On Fri, Apr 24, 2009 at 11:01 AM, Dan Harnett dan...@harnett.name wrote: On top of that, if VeriSign could be tricked into signing a fake Microsoft ActiveX key, can you really trust the authorities? Are you implying SPF records

Re: autowhitelister for spamd needs testing

2009-04-24 Thread Bob Beck
i think part of the success i experience using SPF as a means to create whitelists is in the fact that i maintain the list of domains i fancy whitelisting. unfortunately, it would be trivial for someone to take advantage of an spf-based automatic whitelist to slip right on thru

Re: autowhitelister for spamd needs testing

2009-04-23 Thread Joakim Aronius
Yeah, this is useful for manually maintaining a list of domains for which you want to check spf records and update the whitelist. I.e. domains such as hotmail.com and google.com which fulfill the following requirements: a) use round-robin sending mailservers b) are somehwat trusted I do this

Re: autowhitelister for spamd needs testing

2009-04-23 Thread Gregory Edigarov
Dave Anderson wrote: On Wed, 22 Apr 2009, jared r r spiegel wrote: On Thu, Apr 23, 2009 at 12:30:28AM +, Stuart Henderson wrote: I see a tiny little problem with this method... sometimes people send spam from domains whose DNS they control. +1 i think part of the

Re: autowhitelister for spamd needs testing

2009-04-23 Thread Gregory Edigarov
Stuart Henderson wrote: On 2009-04-22, Gregory Edigarov g...@bestnet.kharkov.ua wrote: Hello list, I think spamd users would like to try this small utility. Although its development is in the very beginning it does its job quite well for me it was written for the case where a big mass

Re: autowhitelister for spamd needs testing

2009-04-23 Thread Dan Harnett
On Thu, Apr 23, 2009 at 03:32:49PM +1000, Aaron Mason wrote: On Thu, Apr 23, 2009 at 10:30 AM, Stuart Henderson s...@spacehopper.org wrote: I see a tiny little problem with this method... sometimes people send spam from domains whose DNS they control. If this is the case, then you have

Re: autowhitelister for spamd needs testing

2009-04-23 Thread Bob Beck
Auto-whitelisting based on input from the spammer is bad. You may as well save yourself the trouble and not use spamd. Indeed. it is utterly mentally retarded. most spam is bogusly sent from real envelope senders. Smart spammers just randomize their recipient lists and use them as the

Re: autowhitelister for spamd needs testing

2009-04-23 Thread Stuart Henderson
On 2009-04-23, Aaron Mason simplersolut...@gmail.com wrote: On Thu, Apr 23, 2009 at 10:30 AM, Stuart Henderson s...@spacehopper.org wrote: I see a tiny little problem with this method... sometimes people send spam from domains whose DNS they control. If this is the case, then you have an

Re: autowhitelister for spamd needs testing

2009-04-23 Thread Aaron Mason
On Fri, Apr 24, 2009 at 4:39 AM, Dan Harnett dan...@harnett.name wrote: Huh? Spammers have been using throw away domains for ages. Adding a SPF record to their own domains has been trivial. No spoofing required. Basically, you're accepting input from the bad guys and treating it as valid

Re: autowhitelister for spamd needs testing

2009-04-23 Thread Aaron Mason
On Fri, Apr 24, 2009 at 11:01 AM, Dan Harnett dan...@harnett.name wrote: On top of that, if VeriSign could be tricked into signing a fake Microsoft ActiveX key, can you really trust the authorities? Are you implying SPF records are validated somewhere and signed by a trusted third party?

Re: autowhitelister for spamd needs testing

2009-04-22 Thread Gregory Edigarov
Hello list, I think spamd users would like to try this small utility. Although its development is in the very beginning it does its job quite well for me it was written for the case where a big mass mailer like google is trying to send us mail. The utility notices such mailers and white

Re: autowhitelister for spamd needs testing

2009-04-22 Thread Stuart Henderson
On 2009-04-22, Gregory Edigarov g...@bestnet.kharkov.ua wrote: Hello list, I think spamd users would like to try this small utility. Although its development is in the very beginning it does its job quite well for me it was written for the case where a big mass mailer like google is

Re: autowhitelister for spamd needs testing

2009-04-22 Thread jared r r spiegel
On Thu, Apr 23, 2009 at 12:30:28AM +, Stuart Henderson wrote: I see a tiny little problem with this method... sometimes people send spam from domains whose DNS they control. +1 i think part of the success i experience using SPF as a means to create whitelists is in the fact that i

Re: autowhitelister for spamd needs testing

2009-04-22 Thread Dave Anderson
On Wed, 22 Apr 2009, jared r r spiegel wrote: On Thu, Apr 23, 2009 at 12:30:28AM +, Stuart Henderson wrote: I see a tiny little problem with this method... sometimes people send spam from domains whose DNS they control. +1 i think part of the success i experience using SPF as a means

Re: autowhitelister for spamd needs testing

2009-04-22 Thread Daniel Ouellet
Dave Anderson wrote: On Wed, 22 Apr 2009, jared r r spiegel wrote: On Thu, Apr 23, 2009 at 12:30:28AM +, Stuart Henderson wrote: I see a tiny little problem with this method... sometimes people send spam from domains whose DNS they control. +1 i think part of the success i experience

Re: autowhitelister for spamd needs testing

2009-04-22 Thread Aaron Mason
On Thu, Apr 23, 2009 at 10:30 AM, Stuart Henderson s...@spacehopper.org wrote: I see a tiny little problem with this method... sometimes people send spam from domains whose DNS they control. If this is the case, then you have an almost direct pointer to the cause. The only way this wouldn't