[swinog] Bluewin SMTP Policy

2008-06-13 Thread Roger Schmid
Dear Swinog members Until now, we provided an authenticated smtp-server for our customers and a separate "open" smtp-server for customers with email-adresses from other providers. We would like to shut down the relaying server and have the customers use the smtp-servers from their mail-provider (g

Re: [swinog] Bluewin SMTP Policy

2008-06-13 Thread Jeroen Massar
Roger Schmid wrote: Dear Swinog members Until now, we provided an authenticated smtp-server for our customers and a separate "open" smtp-server for customers with email-adresses from other providers. We would like to shut down the relaying server and have the customers use the smtp-servers from

Re: [swinog] Bluewin SMTP Policy

2008-06-13 Thread Adrian Ulrich
Hi Roger, > Now we found out that bluewin doesn't allow authenticated smtp-relay > from users outside their ip-range, so all our customers with > bluewin-mailadresses would have no smtp-server available. That's not entirely correct: smtpauth.bluewin.ch will relay mails from non-bluewin-ip-ranges

Re: [swinog] Bluewin SMTP Policy

2008-06-13 Thread Roger Schmid
On Fri, Jun 13, 2008 at 10:13 AM, Adrian Ulrich <[EMAIL PROTECTED]> wrote: > Hi Roger, > >> Now we found out that bluewin doesn't allow authenticated smtp-relay >> from users outside their ip-range, so all our customers with >> bluewin-mailadresses would have no smtp-server available. > > That's no

Re: [swinog] Bluewin SMTP Policy

2008-06-13 Thread Jeroen Massar
Roger Schmid wrote: [..] Otherwise spammers would open 100th's of free accounts and use them to send spam from non-bluewin IPs :-/ I see the problem, but perhaps something like a captcha would also be sufficient to prevent this. SMTP-Captcha's? :) How do you envision that? Greets, Jeroen

Re: [swinog] Bluewin SMTP Policy

2008-06-13 Thread Roger Schmid
On Fri, Jun 13, 2008 at 10:52 AM, Jeroen Massar <[EMAIL PROTECTED]> wrote: > Roger Schmid wrote: > [..] >>> >>> Otherwise spammers would open 100th's of free accounts and use them to >>> send spam from >>> non-bluewin IPs :-/ >> >> I see the problem, but perhaps something like a captcha would also

Re: [swinog] Bluewin SMTP Policy

2008-06-13 Thread Rainer Duffner
Roger Schmid schrieb: On Fri, Jun 13, 2008 at 10:13 AM, Adrian Ulrich <[EMAIL PROTECTED]> wrote: Hi Roger, I see the problem, but perhaps something like a captcha would also be sufficient to prevent this. I don't think so. Spammer signing up for free accounts is also a "social"

Re: [swinog] Bluewin SMTP Policy

2008-06-13 Thread Jeroen Massar
Roger Schmid wrote: On Fri, Jun 13, 2008 at 10:52 AM, Jeroen Massar <[EMAIL PROTECTED]> wrote: Roger Schmid wrote: [..] Otherwise spammers would open 100th's of free accounts and use them to send spam from non-bluewin IPs :-/ I see the problem, but perhaps something like a captcha would also b

Re: [swinog] Bluewin SMTP Policy

2008-06-13 Thread Peter Guhl Listenempfänger
Hi Jeroen Massar schrieb: Roger Schmid wrote: [..] Otherwise spammers would open 100th's of free accounts and use them to send spam from non-bluewin IPs :-/ I see the problem, but perhaps something like a captcha would also be sufficient to prevent this. SMTP-Captcha's? :) I guess he mea

Re: [swinog] Bluewin SMTP Policy

2008-06-13 Thread Rainer Duffner
Jeroen Massar schrieb: Just display the captcha from the signup on $pornsite, a person will fill it in for you, captcha bypassed. If it is interesting and cheap for then to abuse it, they will. Do you have a current, working example for that? (Just for research purposes, of course) ;-

Re: [swinog] Bluewin SMTP Policy

2008-06-13 Thread Roger Schmid
On Fri, Jun 13, 2008 at 10:58 AM, Jeroen Massar <[EMAIL PROTECTED]> wrote: > Roger Schmid wrote: >> >> On Fri, Jun 13, 2008 at 10:52 AM, Jeroen Massar <[EMAIL PROTECTED]> wrote: > > Just display the captcha from the signup on $pornsite, a person will fill it > in for you, captcha bypassed. If it i

Re: [swinog] Bluewin SMTP Policy

2008-06-13 Thread Jeroen Massar
Rainer Duffner wrote: Jeroen Massar schrieb: Just display the captcha from the signup on $pornsite, a person will fill it in for you, captcha bypassed. If it is interesting and cheap for then to abuse it, they will. Do you have a current, working example for that? (Just for research purpos

Re: [swinog] Bluewin SMTP Policy

2008-06-13 Thread Peter Guhl Listenempfänger
Hi Rainer Duffner schrieb: Jeroen Massar schrieb: Do you have a current, working example for that? (Just for research purposes, of course) ;- Well, I found an article mentioning the idea: http://www.boingboing.net/2004/01/27/solving-and-creating.html But it doesn't seem to provide an impl

Re: [swinog] Bluewin SMTP Policy

2008-06-13 Thread Adrian Ulrich
Hi, > Thank you for clearing this up. So we have to give bluewin-users with > free bluewin mail-accounts an smtp-account on our servers I think. Well, they could call our helpdesk and ask them to disable the 'Restricted IP-Range' feature for a specific mailaccount. Our helpdesk will disable it

Re: [swinog] Bluewin SMTP Policy

2008-06-13 Thread Peter Guhl Listenempfänger
Adrian Ulrich schrieb: I see the problem, but perhaps something like a captcha would also be sufficient to prevent this. It wouldn't prevent it, it just makes it harder. (Some spammers don't even use bots to create accounts. Using real people appears to be cheaper sometimes..) It always takes

Re: [swinog] Bluewin SMTP Policy

2008-06-13 Thread Simon Leinen
Jeroen Massar writes: > Just display the captcha from the signup on $pornsite, a person will > fill it in for you, captcha bypassed. If it is interesting and cheap > for then to abuse it, they will. The approach is mentioned in an excellent talk by Louis von Ahn, who invented the CAPTCHA: http://