Re: [Operators] How-to fight with SPAM accounts

2009-11-25 Thread Jesse Thompson
Peter Saint-Andre wrote: I think that the key for the 'right/best' anti-SPAM XMPP solution is to involve regular/polite XMPP users in any way. I have my doubts that normal users will bother to flag messages as spam. However, given that I have only ever received a few spam messages over XMPP (an

Re: [Operators] How-to fight with SPAM accounts

2009-11-25 Thread Jesse Thompson
Philipp Hancke wrote: Peter Saint-Andre wrote: As I always say, we don't need to be perfect, just more difficult to attack than other networks. Part of raising the cost (mostly the cost in time) would involve requiring TLS with CA-issued certificates for s2s (perhaps we can get there eventually!

Re: [Operators] DNSBLs

2009-11-25 Thread Jesse Thompson
Norman Rasmussen wrote: I was under the impression the DNS block lists don't work well anymore (too many false positive, not enough true negatives) Not true in terms of volume, but true in terms of the "quality" of the spam that is caught. DNSBLs prevent 80-90% of our total email volume via