Slashdot Mirror


ORBS Forks

Noxxus writes: "Wired is carrying this article about the shutdown of Alan Brown's Open Relay Behavior-Modification System, more commonly known as ORBS. Brown, of New Zealand, closed his operation after two local companies won legal injunctions against him for listing them." It seems the list of 94,000 open relays will be maintained by: "Open Relay Black List of Phoenix, AZ, Open Relay Block Zone (ORBZ), of Basingstoke, England, and the Open Relay Database (ORDB), of Aarhus, Denmark." We've gotten a zillion ORBS submissions since the day its website went down, but this is the first post-ORBS story with enough info to be worth a mention. Guess the dust just needed to settle.

We're obviously in the minority, but I think the EFF's John Gilmore has cut to the chase:

For Gilmore, spam blocking should occur at the recipient level, not at the level of self-appointed upstream censors.

"I noticed years ago that the community tends to go 'mob' and lose its morals and principles when it comes to spam," Gilmore says. "Free speech, interoperability, inclusiveness, tolerance, privacy, anonymity -- all go out the window when they get in the way of killing off those damn spammers."

I wonder if he'll get added to spam lists now, like I do every time I post a story critical of anti-spam activists. Yeah, subscribe me and Rob to more mailing lists under the handle "Spamlover." That's real mature.

15 of 249 comments (clear)

  1. If the end user chooses it isn't censorship by FreeUser · · Score: 5

    As long as it is the end user, and not ISPs, that are filtering based upon the ORBs databases, then it isn't censorship, rather it is simply filtering based upon another's suggestion.

    One could argue that personal email is not a public forum, such as USENET and places like slashdot, and that any form of filtering, at any point along the way, is not censorship in the real sense of the word.

    In any event, as long as the end user is informed, and has a choice, it isn't the kind of institutional censorship so often, and so correctly, decried here, it is merely voluntary filtering of what those who subscribe to it view as noise, as is their right.

    As for slashdot being united about anything, a quick perusal of any discussion, on any topic, should dissuade you of that erroneous assumption.

    --
    The Future of Human Evolution: Autonomy
  2. Three things... by Todd+Knarr · · Score: 4

    1. The recipients typically can't block mail from open relays. Doing that requires rulesets in the mail server that process based on the IP address the incoming SMTP connection is coming from. That requires root access to the ISP's mail servers. Few ISPs give that access to ordinary users, and gods help the ones that do. And it'd require a mailserver for each user. The best you can do is have the ISP use services like MAPS and ORBS and add headers to the message that users can use to reject mail, and that depends on the users being able to set up procmail or something similar, which isn't feasible for Windows-based users.
    2. Gilmore's own argument works against him. If ISPs have a right to transport mail, then they have a right to not transport mail. Gilmore's going beyond advocating free speech and into the unacceptable to me area of requiring a third party to pay for the hall for the spammers to excercise their free speech in.
    3. Yes, MAPS and ORBS do cut off legitimate mail. If they didn't, then there's be no incentive for anyone to clean up the spam. The recipients of spam who're complaining about it typically aren't customers of the ISPs being used to send the spam, so the ISP loses no money by ignoring their complaints. Only when their customers start complaining because all mail from that ISP is being rejected do the ISPs feel any pressure to shut down the spammers. It'd be nice if it were otherwise and ISPs acted politely, but reality is they don't and we have to live with it.
  3. Re:Make a decision, folks by bravehamster · · Score: 5
    This is no troll, it's the truth, the overall sentiment that I've seen in comments on the site in the last several years is "Oh my God they're trying to stop us from saying what we want" on one day and "We must censor spammers" on the next.

    There is a huge freaking world of difference between censorship and closing open mail relays. This is *not* a free speech issue. The people using open mail relays are not legitimate businesses. They are hijacking other peoples 1)ignorance or 2) goodwill in order to hide their origins and make it impossible for the *end user* to block these unwanted messages. If people want to send spam, fine. All the best of luck to them. But they should at least be honest about it. This has absolutely nothing to do with free speech.

    --
    ---- El diablo esta en mis pantalones! Mire, mire!
  4. Re:Make a decision, folks by Coward,+Anonymous · · Score: 5

    Nobody's saying spammers shouldn't be allowed to say what they're saying, it's how they're saying it. Pepsi can run commercials on TV telling me to drink pepsi all they want, but if they hire someone to tap the message "Drink more pepsi" in morse code on my forehead then they've gone too far and should be stopped. If someone wants to sell me a list of 50 billion email addresses of eighteen year old girls who want to enlarge my penis while making money fast that's fine, I have no problem with them doing that, get an ad in a newspaper or magazine but don't email it to me and don't tap it into my forehead and don't shout it via megaphone at 3:00 AM outside my house.

  5. Re:And good riddance! by Greyfox · · Score: 4

    Sorry, I missed your E-Mail address in your user profile. Please post it so we can help the spammers practice their constitutionally guaranteed right of free speech on you.

    --

    I'm trying to teach myself to set people on fire with my mind... Is it hot in here?

  6. Honestly... by 11thangel · · Score: 4

    I tend to assume that spam can only be handled on the level of me and my personal friends. Which is why i own and/or control every server that hosts my email, and i can filter what i want/dont want. The "if you want the job done right, do it yourself" attitude may seem a bit cynical, but it works, and doesnt rely on some company thats either a) struggling to stay afloat or b) trying to make more profits of my personal info.

    --

    I am !amused.
  7. Spam is *not* free speech! by Yekrats · · Score: 5
    You do not have a right to spam my email-box. Spam has become impossible to stop using blocking at the user level. Spammers set up a dozen free "throwaway" accounts a week, so a user blocking one will do no good. Usually the accounts are cancelled after a few days anyway.

    Saying "spam is free speech" is like saying "I, posing as you, using your neighbor's phone card, calling some guy in California to sell him a penile enhancement tool which he doesn't want" is free speech.

    The best strategy I can see for limiting spam is ending the open relays. I don't see any legitimate use for an open relay. Anyone care to enlighten me?

    --
    Ceci n'est pas une pipe.
  8. Make a decision, folks by SuiteSisterMary · · Score: 4

    Censorship is either good or bad. Pick one.

    --
    Vintage computer games and RPG books available. Email me if you're interested.
    1. Re:Make a decision, folks by GreyPoopon · · Score: 5
      It's not a lack of decision here. This is not simply a war on censorship. Obviously, preventing somebody from expressing their opinion is censorship. But I'm under no obligation to allow anybody to express their opinion to the world while I'm paying for it. How would you like it if I spray painted my opinion all over your car windshield? I bet you'd enjoy paying to have it removed so that you could actually see where you're driving, too.

      Look at the facts.

      • I PAY for my internet service. I have a limited amount of space available in my e-mail account. When somebody spams me, they are benefiting from what I have paid.
      • My ISP is paying for servers and storage space. They are paying for bandwidth. When they have to receive and store all of the spam, they are basically paying for the spammer to use their services.
      • Everybody in between me and the ISP is paying for the spammers to use their services.

      Now, I can see two possibilities (neither of which will ever happen) that could help with this situation. The first is for the headers of spam to contain an obligatory item indicating that the e-mail is commercial and unsolicited. This would allow ISPs to choose whether or not to route the e-mail. The second is to have a centralized list, similar to ORBS, that includes per-user registration. If a user "opts out" of spam, any subscribing servers could refuse to route e-mail from likely spam sources that have the opted out user as a destination.

      Face it, this is not just a battle over censorship.

      GreyPoopon
      --

      --

      GreyPoopon
      --
      Why is it I can write insightful comments but can't come up with a clever signature?

  9. Re:Shameful Corporate Behavior and its Consequence by oob · · Score: 4

    One of them was XTRA, the ISP owned by the ex-SOA telco Telecom New Zealand. I believe the other was Actrix, a Wellington based ISP. Before you go "publicly shaming" those two organisations, you should be aware that their blacklisting may very well have had more to do with Alan Brown's personality (I like the guy and respect him immensely but must acknowledge that he can be extremely difficult) and his commercial interests than it did spam. That said, more power to him and Manawatu Internet services. He keeps "the Man" on his toes.

  10. ORBS/MAPS has forced me to learn my mail system by TheGratefulNet · · Score: 5
    a few weeks ago, I was FLOODED with dictionary attacks to my home mail system.

    some joker in mpinet.net just wouldn't give up - I had several hits PER SECOND on my home dsl line. quite the TOS attack.

    I was forced to learn more about my mail system (qmail on openbsd) and the oh-so-useful tcp-wrappers. I also learned about the ORBS, MAPS/RBL/RSS servers.

    in a few days I had hacked my qmail and tcpwrappers system to consult the RBL lists and if there was a hit, add the offender to a local cache (so that I can recognize him quickly next time).

    since my site has very very few valid usernames, it was also easy to honeypot the spammers and when an invalid username was sent to, the source IP and username would be logged for future auto-blacklisting.

    I've found that cutting the spammers off at the tcp-env level is quite effective in cutting down bandwidth. they can't even telnet to my port 25 anymore - I immediately shutdown the connection! no more megabyte-of-.doc crap, no more offensive spam, no more crapola, nada. just clean and quick tcp rejects ("connection refused").

    the only shame is that I fear most mass abusers don't check the return codes of mail attempts and more than that, they engage the STOLEN use of open relays. so its the open relay that queues and retries and retries (I see it in my logs..) over and over. I almost wonder if I should let them complete their junk email exchange (only after hours, when I don't need my line) just to help purge their queues (?).

    at any rate, the following scripts are quite useful in this battle:

    rlytest.pl, checks (sends mail to) open mail relays

    blq.pl, checks the MAPS,ORBS,RSS,DUL realtime blocking lists

    --

    --

    --
    "It is now safe to switch off your computer."
  11. Re:And good riddance! by connorbd · · Score: 5

    This is one of those situations that strikes me as being a misguided application of civil liberties thinking. Fact is, this is a technical and financial problem, not a freedom-of-speech problem. Spam annoys people and cuts bandwidth. I really don't think freedom of speech extends to dumping junkmail by the grocerybag-full in my backyard, which is essentially what spam is. A spammer makes a mess of my mailbox, I have to clean it up (maybe pay for it if I'm using a service like Palm.net -- there are still services that charge for downloads), and this is protected speech? There's a gap missing in the logic here.

    Just out of curiosity, what's Gilmore's take on junk fax? I'm sure even he realizes that that's an issue...

    /Brian

  12. What it comes down to for me is... by TOTKChief · · Score: 4

    ...choice. I can choose to use ORBS [in a way, I do, since I use SpamCop], or I can choose not to use it. Using ORBS will block mail, some legitimate, from reaching me. But hey, that's my choice.

    While the Internet is open [for the most part] territory, each of the ISP's are private entities and, if they so choose, can choose to use ORBS [or similar] to protect their customers from spam. Some will like it, some won't. The spam policy is one of the things I research about an ISP before I use them--and when they make changes in that policy, I sort through them. I have left an ISP because of a spam policy, and I won't hesitate to do so again.

    If you don't like that Earthlink is using ORBS and its child processes, don't use Earthlink. It's as simple as that.

  13. How I dealt with my spam... by Gruneun · · Score: 5

    Granted, I only did this on rare occassions when the amount of spam from a particular company irritated me.

    The last time was when I was investigating an application for our company. I visited their website and downloaded the trial version. When I filled the online form I used a "spam" address that I use specifically for occassions like this. However, when I contacted one of their sales people for an extension on the trial period, the guy added my name to a newsletter. Incensed, I wrote the guy and told him to remove me ASAP. When it became apparent that he was either unable or unwilling to remove me, I reversed the situation. I began forwarding all of my spam to him... all of it... from 3 accounts, including my "spam" account, averaging 200-300 emails a day.

    Knowing he was a salesperson and maintaining an unchanging email address was vital, I wasn't surprised to be contacted within 2 days by their administrator. At which point, I informed him that until I received a formal, snail-mail (I loved that part) apology from the salesperson, that it would continue.

    Then I added the administrator.

    Knowing my mail was probably getting blocked, I used several accounts on several machines, rotating the names daily, and religiously adding a header explaining the situation. All in all, I was contacted by 5-6 people on my "important" email address and each time I added that name to my forwarding list (checking the company overview page and adding some execs probably didn't hurt, either). It took under a week and I received a fedex letter from that salesperson. I promptly stopped my forwarding and have yet to receive a single email from the company.

    I know this isn't the ideal way to stop spam, as most spammers are near impossible to reach, but it worked for me. Getting a taste of their own medicine never hurts.

  14. Re:Spam by siegesama · · Score: 4

    The main goal wasn't so much filtering spam as it was getting people to close their mail relays. If you had a mail server with an open relay, and knew that most of the mail from that server would never GET anywhere because of that, it'd be a pretty logical and obvious step to just turn relay-ing off.

    Hence the name ORBS "Open Relay Behavior-Modification System". Modifying the behaviour of open relays by getting them to not BE open relays any more.

    The filtering was a (nice) side-effect, or a means to get to the end.

    --
    what the hell is a 'junk character', anyway?