From owner-freebsd-stable@FreeBSD.ORG Sat Jan 27 15:04:31 2007 Return-Path: X-Original-To: freebsd-stable@freebsd.org Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 50A2B16A405 for ; Sat, 27 Jan 2007 15:04:31 +0000 (UTC) (envelope-from rsmith@xs4all.nl) Received: from smtp-vbr11.xs4all.nl (smtp-vbr11.xs4all.nl [194.109.24.31]) by mx1.freebsd.org (Postfix) with ESMTP id C33DA13C483 for ; Sat, 27 Jan 2007 15:04:30 +0000 (UTC) (envelope-from rsmith@xs4all.nl) Received: from slackbox.xs4all.nl (slackbox.xs4all.nl [213.84.242.160]) by smtp-vbr11.xs4all.nl (8.13.8/8.13.8) with ESMTP id l0RF4MsD050352; Sat, 27 Jan 2007 16:04:23 +0100 (CET) (envelope-from rsmith@xs4all.nl) Received: by slackbox.xs4all.nl (Postfix, from userid 1001) id 7C06FB827; Sat, 27 Jan 2007 16:04:22 +0100 (CET) Date: Sat, 27 Jan 2007 16:04:22 +0100 From: Roland Smith To: Jim Pingle Message-ID: <20070127150422.GA96846@slackbox.xs4all.nl> Mail-Followup-To: Jim Pingle , JoaoBR , freebsd-stable@freebsd.org References: <8a20e5000701240903q35b89e14k1ab977df62411784@mail.gmail.com> <200701260924.59674.joao@matik.com.br> <20070127041608.GG927@turion.vk2pj.dyndns.org> <200701271058.47517.joao@matik.com.br> <20070127141052.GA96039@slackbox.xs4all.nl> <45BB6296.1080106@pingle.org> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="HcAYCG3uE/tztfnV" Content-Disposition: inline In-Reply-To: <45BB6296.1080106@pingle.org> X-GPG-Fingerprint: 1A2B 477F 9970 BA3C 2914 B7CE 1277 EFB0 C321 A725 X-GPG-Key: http://www.xs4all.nl/~rsmith/pubkey.txt X-GPG-Notice: If this message is not signed, don't assume I sent it! User-Agent: Mutt/1.5.13 (2006-08-11) X-Virus-Scanned: by XS4ALL Virus Scanner Cc: freebsd-stable@freebsd.org, JoaoBR Subject: Re: Loosing spam fight X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 27 Jan 2007 15:04:31 -0000 --HcAYCG3uE/tztfnV Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sat, Jan 27, 2007 at 09:32:54AM -0500, Jim Pingle wrote: > To defeat this, wouldn't a spammer just have to send out the same spam tw= ice > in a row from the same machines, spaced apart by a little time? Yes. But in practice, most spammers don't bother. They don't use a real SMTP server, but custom apps that can be run from zombies to push out as much spam as possible. See http://projects.puremagic.com/greylisting/whitepaper.html > Bonus for the spammer: accounts on servers without greylisting would get = two > copies of the spam. That's not a bonus. Think about it. Sending a message twice will cut the spammer's mail delivery rate at least in half.=20 > Greylisting is a decent idea, but it seems to me that it's just another t= ool > in the ongoing arms race against spammers.=20 There is no silver bullit. But currently greylisting seems to stop around 95% of spam, and a lot of e-mail based virusus too. See the link abo= ve. > It may work for a while, but eventually they'll catch on and it will > only cause unnecessary delays for legitimate mail. Since the "cure" for greylisting involves at least cutting the spam rate in half, I doubt many spammers will adopt it. As for delaying legitimate mail, SMTP is considered an unreliable transport. That is why RFC 821 allows for temporary failures. If you want to contact someone about something that is time-critical, you shouldn't use e-mail anyway. Roland --=20 R.F.Smith http://www.xs4all.nl/~rsmith/ [plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated] pgp: 1A2B 477F 9970 BA3C 2914 B7CE 1277 EFB0 C321 A725 (KeyID: C321A725) --HcAYCG3uE/tztfnV Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.1 (FreeBSD) iD8DBQFFu2n2EnfvsMMhpyURAiXEAJ0ZMNCCFCwZ04mZ6LB2dnxxYxP2IQCcDNBN 8J6yOkIALBdUj9L+pbNtPdM= =tXJN -----END PGP SIGNATURE----- --HcAYCG3uE/tztfnV--