Re: [SLUG] SPAM blackhole lists?

From: Bill Triplett (btt@nethouse.com)
Date: Wed Jan 16 2002 - 23:08:11 EST


On Wed, Jan 16, 2002 at 09:44:28PM -0500, Paul M Foster wrote:
> On Mon, Jan 14, 2002 at 10:48:35PM -0500, Russ Herrold wrote:
>
> <snip>
>
> > I use several and am very active with orbz
>
> <snip>
>
> > Orbz has ZERO false positives -- ZERO -- for every listing is
> > backed up with a piece from the ORBZ tester.
> >
>
> After some idiot sent me about 50 identical emails in one day, and after
> the spam seems to have picked up a lot lately, I just jacked my email
> plumbing into ORBZ. Now, let's say an "innocent" person gets caught in
> this, and their email is rejected. Assuming they now can't contact you
> about being rejected or whatever, how do you know that their email was
> even rejected?

It shows up in the logs. With sendmail you can customize the reject
message. Maybe offer them an email address to complain to (like
abuse@). Then designate abuse@ as a SPAMFRIEND in the access.db and
configure sendmail to delay the orbz check until the RCPT TO: part of
the email transaction has arrived.

The admin or sender will be able to state his or her case to abuse@,
then if they seem legit, add their server to the access.db as OK.

That is how I've set it up at work, after only two days of experience
with orbz. So perhaps there is a more straightforward way to do this.

I have no idea how other MTAs would handle this...



This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 19:08:21 EDT