Slashdot Mirror

Yes, WMAU works great with mozilla. Here is a pretty big list of banks. Hasn't been updated in 5 months though.

Financial institutions and browsers:

Financial Shames (Mozilla)
Online Banking with Konqueror
Banks and Browsers

I found this site a few days ago:

http://www.blue-labs.org/financial-shames.php .

Lots of good information on Banks and which browsers they support.

You can find a partial list of banks/cc companies and their Mozilla support here

I only care because I've been following the capitalone.com bug for months with no help whatsoever from them.. Oh well. The MBNA site for my Linux Fund card works fine. I'll be cancelling my capitalone card soon.

This page will be linked in the next version of the FAQ, which I'm at home working on now ...

Bmilter

Bmilter - Filter program for use with Sendmail
July 5th, 2002

Bmilter is written in C and uses the Sendmail Milter library. Bmilter is intended to be the most capable mail filter for sendmail in existence. Every means I can find that is an effective and sensible method for filtering spam will get plugged into Bmilter. There will be some exceptions naturally...I don't intend to support any perl type of plugin or scripting and I don't intend to weigh down the process in a CPU intensive heuristics or genetic anomaly detection routine.

Until Bmilter reaches a stable production quality with message archiving, Bmilter will remain an advisory filter only. This means that Bmilter will NOT do any actual rejecting or dropping of mails. You may use your email client's built in filtering tools or if you have the option, using procmail. Bmilter inserts headers starting with X-Bmilter. Bmilter will insert a header stating the messages was fully processed by all filter methods only if the message has been scanned by all filters. Sendmail may abort Bmilter at any time, the milter program (Bmilter) has no control over this. This means that the email may have only been scanned partially or not at all.

Example:

* X-Bmilter: Message fully processed with Bmilter version xxx; timestamp
* X-Bmilter: DNSBL=True; Sender IP 200.24.71.150 found at bl.spamcop.net
* X-Bmilter: Failed Sender Verification=True; The mail server for the sender's domain doesn't support the email address that purportedly sent this email.

What Bmilter does so far.

Bmilter database
Bmilter uses SQL (Postgres) to hold all the configuration, referred to from now on as the registry. Since I do everything very simple and standard with SQL, it should be a snap for anyone to add mysql etc. I personally won't do it because I don't have mysql installed and I don't want to. I'll happily apply patches sent to me however.DNS Blacklists
Looks up the IP of the inbound connection against all the DNS blacklists in the Bmilter registrySMTP callback
Verifies the following:

* RFC 821, MAIL FROM:

You are required to support a NULL return path according to RFC 821. Some people disable this either because they think it's cute or because they're trying to disable spam sent with a NULL return path. Irregardless, it's broken.
* RFC 822, RCPT TO:

Sites without Postmaster accounts are simply due to admin laziness or misconfiguration. According to RFC 822, you are required to accept mail for a few specific accounts, this is one of them.
* RCPT TO:

If the sender is unknown on the machine that answers for the domain used by the sender, then either a) the site is misconfigured or b) in all probability this is a spoofed email address and the email content is spam.

Checks for a few random textual strings
Right now Bmilter tests for the California ADV prefix in the Subject line. This is in preparation for regular expression implementations.Prelimiary Statistics
Currently I'm cataloging the number of connections sent to Bmilter, the number of emails processed, and the number of aborts. Stats will develop for each individual filter for pass/fail/undetermined.

User preferences

* Authenticated Sender (key=auth); default action: accept; alternate action: continue;
* DNS Blacklist (key=dnsbl); default action: tag; alternate actions: (remove from rcpt list|bounce);
* SMTP Callback (key=smtpcallback); default action: tag; alternate action: reject;

Instead of boosting the pigeonrank of any page that doesn't validate, I think it makes more sense to list a bunch of competing sites and say how well each one validates. Here are some sites that I think do it right:

Search Engine HTML Validation Results - list of major search engines and web directories, showing how many HTML errors the W3C validator finds on both the front page and the results of a search for "mp3 rippers". The table was posted on June 29. One site (dmoz.org) made its front page validate by July 3.

Financial Institutions and Mozilla Operability - list of many banks, saying how well Mozilla works with each bank. By concentrating on the practical "Can I use this site with Mozilla" rather than the ideal "Does this site validate", this site is more useful to users trying to decide which competitor to choose. It is therefore more powerful for getting the sites to fix themselves.

and for contrast:

Free Web Hosts - list of free web hosts and whether the host makes an uploaded web page stop validating. Doesn't have enough data for a table yet, so there's not much pressure on hosts to change. Uploads XHTML test pages rather than HTML 4.01 test pages, which seems like an odd choice to me.

Outlook Express does support SMTP AUTH, assuming you have the version from '98 or later, SPA turned off, and configured your mail server properly.

I know, as I have clients using Sendmail to relay; the main problem is that SMTP AUTH setup is not easy, as you have to compile SASL, sometimes OpenSSL, recompile sendmail with support for the previous, add configuration for the support, and configure SASL support and optionally generate SSL certificates.

Check out my sendmail site, or this other one (Sendmail w/ PostgreSQL support) for various SMTP AUTH/Sendmail related resources, they might help you get SMTP AUTH working right.

Have you read about his super-duper radical new invention of "Nano Probes"? Hint, think 'ping'.

For more information on this monkey, see a writeup my brother did on his work. As you read, notice that the email headers address a real security mailing list, not Slashdot.