Slashdot Mirror


MAPS vs. Gordon Feyck: Who Owns the DUL?

etrnl writes "The spam-l mailing list has an interesting post from Nick Nicholas about a recent lawsuit between MAPS, LLC. and Gordon Fecyk, who had arranged with Paul Vixie to host the DUL with MAPS in 1998. Even more interesting is that Nick was the Executive Director of MAPS who hired Gordon at MAPS in 1999. Notable quote from Nick: 'I find it extremely ironic that an organization which is currently soliciting donations to its own legal defense fund would now be using its limited resources to pursue litigation against a former employee.'" MAPS wants a temporary restraining order on two separate copyright claims: first, that Feyck can't use the DUL database, and second, that he can't run a too-similar website (now down). The bone of contention is that Feyck claims he bought back the DUL from MAPS, and MAPS disagrees. Incidentally, the DUL is currently stopping CmdrTaco from directly emailing one of the Slash coders.

89 of 211 comments (clear)

  1. I know Gord by Kickstart70 · · Score: 3, Funny

    And while I know he's a decent guy, he also tends to be a little too hard-headed for his own good (at least he ws a few years ago). I suspect that some communication here between the parties will clear up a lot of what's going on.

    On the other hand, since I know Gordon to be an honest guy, I suspect that the other party is trying to screw him out of what rightfully is his.

    Kickstart

  2. Re:Acronyms Abound by Anonymous Coward · · Score: 3, Informative

    Yes, in reputable news sources, acronyms are explained the first time they appear in a story. HTML even has an tag which lets you explain it with a mouseover.

  3. Re:Acronyms Abound by MiTEG · · Score: 5, Informative
    MAPS (Mail Abuse Prevention System LLC) is a not-for-profit California organization whose mission is to defend the Internet's e-mail system from abuse by spammers. Their principal means of accomplishing this mission is by educating and encouraging ISP's to enforce strong terms and conditions prohibiting their customers from engaging in abusive e-mail practices.

    DUL (Dial-up User List) is not a blacklist, though it is often mistaken for such. The DUL is a listing of dynamic ISPs that is used as a filter by subscriber ISPs to prevent direct e-mail from those addresses.

    --
    The future isn't what it used to be.
  4. Speaking of antispam.. by mindstrm · · Score: 5, Insightful

    Here's a problem... with no easy way to deal with it.

    Over the last few years, the Internet provider for Costa Rica has been targetted by anti-spam types as a spam hoster.

    Now.. that's all well and good, but the end result is that

    a) The entire country's IP range is on SPEWS
    b) Internet is a government run monopoly here.
    c) There is no direct way to be removed from SPEWS. You cannot contact them. You cannot explain your situation. (My situation is that we happen to have some IP addresses in this country, and have trouble reaching our customers because of it. We don't spam.)

    Now.. I fully support the fact that the Internet is an anarchy, that each individual is free to decide how their network will or will not accept traffic from others, yada yada yada. On that I am firm.

    But when it comes to an ISP.. we have a problem. An ISP that subscribes to this, sure, it's their choice, but it's awfully hard to explain to the client that they have to instruct their ISP to stop using this service. And the odds of the ISP stopping? Not likely.

    The point is, in theory, it's all fair, in practice, it's a problem.

    1. Re:Speaking of antispam.. by Technician · · Score: 2

      But when it comes to an ISP.. we have a problem. An ISP that subscribes to this, sure, it's their choice, but it's awfully hard to explain to the client that they have to instruct their ISP to stop using this service. And the odds of the ISP stopping? Not likely.
      For most ISP's it's a simple choice. Do you want your service to go down frequently due to overloaded connections and mailboxes, or do you want to loose a dissastified consumer while retaining the rest. It's a simple choice for most ISP's.

      --
      The truth shall set you free!
    2. Re:Speaking of antispam.. by yoyoyo · · Score: 5, Interesting
      SPEWS operates on the principle of collateral damage. If an ISP refuses to remove spammers on their system they expand the listings to include non-spammers.

      Basically they want to make it as inconvenient as possible for the ISP's legitamate customers so that the ISP is pressured to change their ways from the inside.

      I agree that you're in a difficult situation, but nothing else works.

      --

      --
      I have taken more out of alcohol than alcohol has taken out of me - Churchill
    3. Re:Speaking of antispam.. by mindstrm · · Score: 4, Insightful

      Again.. I don't accuse spews. Spam is a problem, and everyone is free to decide how to deal with it on their own.

      I agree the system works. Unfortunately for anyone doing business in Costa Rica, there IS no competition. You have no choice. None whatsoever, and given the way things work, it's going to take quite a while to actually get changes made.

      The other thing is..

      This isn't just an ISP in the country.. it's the national (and only) telecom carrier. This is more like UUNET being blacklisted because on some level they sell bandwidth to spammers.

    4. Re:Speaking of antispam.. by ShaunC · · Score: 3, Informative

      Are you talking about RACSA? This RACSA? The RACSA that brings up more than 13,000 various spam sightings, complaints, and abuse reports in a Google search? Considering that most internet users have little clue on what to do with spam, and the percentage of clued folks actually posting to the news.admin.net-abuse* groups is extremely small, 13,000 is a big number.

      Do you recognize the name Ralsky? There's less than 6000 Google hits for him. 13,000 is a big number.

      RACSA has a spam problem. They need to fix it. Until they do, they're going to be running what amounts to a big LAN.

      Shaun

      --
      Thanks to the War on Drugs, it's easier to buy meth than it is to buy cold medicine!
    5. Re:Speaking of antispam.. by blowdart · · Score: 3, Informative

      c) There is no direct way to be removed from SPEWS.

      Bullshit. Or are all those SPEWS: messages in news:news.admin.net-abuse.email figments of my imagination?

      From the spews faq

      Q41: How does one contact SPEWS?
      A41: One does not. SPEWS does not receive email - it's just an automated system and website, SPEWS and other blocklist issues can be discussed in the public forums mentioned above. The newsgroup news.admin.net-abuse.email (NANAE) is a good choice, and Google makes it quite easy to post messages there via the Web as M@ilGate does via email. Note that posting messages in these newsgroups & lists will not have any effect on SPEWS listings, only the discontinuation of spam and/or spam support will. Be aware that posting ones email address to any publicly viewable forum or website makes it instantly available to spammers. If you're concerned about getting spammed, change or "mung" the email address you use to post with.

      So sort your spam problem, then post in nane once its sorted. Until then, don't expect a lot of us to accept your crap.

    6. Re:Speaking of antispam.. by _Sprocket_ · · Score: 2


      Now.. I fully support the fact that the Internet is an anarchy, that each individual is free to decide how their network will or will not accept traffic from others, yada yada yada. On that I am firm.


      Actually, I would characterize the Internet as more a "community" than "anarchy". It works via a network of relationships. It does have standards - but they are really more related to technical issues and ensuring the continued functionality of that community. The community is always open to new members. But if one member wishes to behave in a way that goes against the community's standards, they will find themselves eventually ostracized. And they have only themselves to blame.


      But when it comes to an ISP.. we have a problem. An ISP that subscribes to this, sure, it's their choice, but it's awfully hard to explain to the client that they have to instruct their ISP to stop using this service. And the odds of the ISP stopping? Not likely.


      The ISP shouldn't have to stop using this service. You're putting effort in the wrong direction. The direction to go is YOUR ISP. Government or not, your challenge is to collect some references and explain the situation. Get them to understand that their actions are effectively cutting themselves off from the Internet.


      You are the one with the sociopath in your family and its your problem to deal with. Not the community's.

    7. Re:Speaking of antispam.. by mjh · · Score: 3, Informative
      I agree that you're in a difficult situation, but nothing else works.

      I disagree with this assessment. There are at least two other things that work, and IMHO work better. The first is spamassassin, and the second is TMDA. I use both of these in series. And I've not received a single spam in my inbox since January (when I started using them). I used to get 20-30 per day. Now I'm down to zero.

      I don't know how well SPEWS works. But I've used other RBL type systems and they always, at some point or another failed, and could sometimes fail big - where I suddenly start getting hundreds of spam from a non-listed IP. The two systems above can fail, but on a single instance, single email at a time. When they fail, they fail small.

      IMHO, SPEWS, RBL, and any other IP based list systems are antiquated technology in comparison to spamassassin and TMDA. But YMMV.

      $.02

      --
      Key to financial independence: Spend less than you earn. Save and invest the difference. Do it for a long time.
    8. Re:Speaking of antispam.. by Rik+van+Riel · · Score: 2
      Again.. I don't accuse spews. Spam is a problem, and everyone is free to decide how to deal with it on their own.

      I agree the system works. Unfortunately for anyone doing business in Costa Rica, there IS no competition. You have no choice. None whatsoever, and given the way things work, it's going to take quite a while to actually get changes made.

      I guess that just means you have to find a way to put pressure on your ISP to get the spammers removed from your network, otherwise you'll slowly get disconnected from the internet.

      Connecting to my server is not a right, it's a priviledge. If an ISP hosts too many spammers it'll end up in SPEWS and I won't allow connections from it.

      My server, my rules. Your ISP, your money, your rules. If enough ISPs block all trafic from RACSA(sp?) maybe they will find a reason to terminate the spammers. It worked for other ISPs, just google and see how many ISPs already kicked off the spammers now hosted by your ISP.

    9. Re:Speaking of antispam.. by mjh · · Score: 3, Interesting

      No, I'm not trolling. I'm quite serious. I think that RBL's are not as effective at their job of blocking spam as TMDA and spamassassin. If you think that spamassassin is just an rbl, then you've misunderstood it. If you think TMDA's blacklist makes it an rbl, then you've misunderstood it.

      Spamassassin is an email heuristic system that takes ordb (and other rbl's) under advisement. But it is not the final say. It also uses vipul's razor as an advisor, but again it's not the final say. Spamassassin has hundreds of different tests that it performs to determine whether or not an email is a spam. Only a few of which are rbl based tests.

      TMDA is a system that doesn't depend on any RBL (Realtime Blackhole List). And contrary to your understanding, it's primary mechanism is NOT a blacklist, it's a whitelist. It's a completely different technology than an RBL. Even if you do use it with a blacklist, it's based on email addresses not IP addresses. So if you spam me, and I blacklist you, your brother on the same email server can still send me email.

      I stand by my original claim. RBL's are antiquated technology in comparison to TMDA and spamassassin. They paint too broad of a brush stroke, blocking many people who you want to receive email from, while failing to block many others who you don't want to receive email from.

      --
      Key to financial independence: Spend less than you earn. Save and invest the difference. Do it for a long time.
    10. Re:Speaking of antispam.. by monkeydo · · Score: 3, Flamebait

      Hey Asshole. You just agreed with him. he said "There is no direct way to be removed from SPEWS."

      And your quoting from the SPEWS FAQ confirms that to be correct.

      Then you said, "So sort your spam problem, then post in nane once its sorted. Until then, don't expect a lot of us to accept your crap." But he already told you he doesn't SPAM. The problem is that SPEWS has blocked his entire country because they operate on the theory of putting a bunch of people in the same boat as the spammers with the (completely misguided) hope that someone else will then take care of the spammers.

      This guy works for a company that can't send mail to anyone on an ISP that uses SPEWS, and yet he has no probelm with SPEWS. He just wants them to stop blocking his non-spamming netblock.

      You seem to be under the impression that only spam originating netblocks are blocked by SPEWS. Consider your delusion to be corrected.

      --
      Si vis pacem, para bellum
      The only thing more annoying than a Libertarian is an (un|mis)informed Libertarian
    11. Re:Speaking of antispam.. by mindstrm · · Score: 2

      SOrry, no. They are also a national carrier.

      Is it UUNET's responsibility to filer spam? No, it's not. They may have some policies.. but you would not block UUNET because they sell bandwidth to ISPs who are spammers.

    12. Re:Speaking of antispam.. by topham · · Score: 2

      Obviously you haven't been paying attention the the recent details of Microsoft trying to charge people for using Hotmail... They keep sending me mail informing me I should (for various reasons) elect to pay for their service.

      You should try dealing with services in a country other than your own, even for neighbors with close ties it can be a royal pain in the ass (Canada and the U.S. in my case). Never mind that the exchange rate puts a significant damper on things. (Ironic twist: I can buy most music cheaper in Canada than you can in the U.S., but the Canadian dollar is worth a fraction of the U.S. dollar...)

      I personally know Gord, can't say he's a friend of mine, but I don't hate him either. I just dislike his politics when it comes to SPAM.

      I'd rather see the judge in this case declair the whole list void and deny either party from using it. :>

      I had dinner with Gord back in about 1998 just after he relocated to Manitoba from B.C. and we discussed the DUL. I didn't like the fact that during the discussion he indicated that my server, running attached to a cablemodem, would be on his list. At the time my Internet provider was having problems sending mail, my solution was to setup my Linux box (firewall, etc) to send outgoing mail. (Relaying explicitly PREVENTED) For me it was the perfect solution, Shaw/@home was not having significant problems receiving mail. Even if there mail server was down mail intended for me would eventually make it through, outgoing mail was an issue because my Windows based mail program would not try repeatedly to send mail. (And I liked what I was using).

      My solution allowed me to continue using the software I wanted to use, and I didn't have to go overboard trying to configure sendmail. (That program is almost scary, but thats a discussion for another day).

      The amusing, to me, thing about the DUL list is that any provider that feels they should use the list should, in that view, filter outgoing traffic intedned for port 25. Thereby making it impossible for their users to send the same type of email they are filtering on incoming. If all providers which used DUL did that there would probably be less span, and even less of a need for DUL, and it would be *OBVIOUS* your ISP was the issue. Not the ISP at the other end you have no control of.

      Personally I find the various balcklists on the net for dealing with SPAM amusing. They don't work 100%, and as such they (in my mind) discourage a proper solution to the problem as they limit it, without remivng it. Enough spam gets through that spammers continue with it, and providers don't get fed up to the point of declaring all out war on SPAM.

    13. Re:Speaking of antispam.. by rodgerd · · Score: 2

      Reading 101: You'll note Costa Ricans have only one ISP, a government protected monopoly. Where are the consumers going to go?

  5. Re:Acronyms Abound by Anonymous Coward · · Score: 2, Informative
    But what is the DUL. And for that matter, what is MAPS- what do they do?

    Did you try clicking the link on "MAPS, LLC"? It's in the story. The linked page also has a link to the DUL.

    MAPS = Mail Abuse Prevention System

    DUL = Dial-up User List

  6. The post? by rainmanjag · · Score: 2, Funny

    Anybody have a URL to the post on spam-l? And thank you to those who explained the acronyms to those of us not familiar with them or the dramatis personae...

    -jag

    --
    http://starboard.flowtheory.net/
    1. Re:The post? by tbetz · · Score: 2, Informative

      There is a SPAM-L web archive, but it's only available to registered SPAM-L members. The identical message was posted to news.admin.net-abuse.email, and is available to all.

  7. Why is Taco trying to directly email him anyway? by Arker · · Score: 2

    If 'the DUL' or, rather, someone utilising the DUL, is preventing him from emailing a second person, that must mean that Taco is using a dialup and has no smtp server of his own to access? That seems more than a bit improbable.

    --
    =-=-=-=-=-=-=-=-=-=-=-=-=-=-
    Friends don't let friends enable ecmascript.
  8. what are they trying to do? by Provincialist · · Score: 2, Interesting
    Not personally knowing any of the participants, but aware of the issues involved, I had always been willing to give them the benefit of the doubt. Blacklists are a good technical solution to the social problem that is spam. While I knew there was some animosity between the old MAPS and the old ORBS, I had always assumed that regardless of egotism, they were doing basically the right thing. Certainly, when ORBS was sued by that spammer I was sure the judge had screwed up. [or was it MAPS that got sued? I forget; it may have been both of them] But this current action really leads me to question the motives of MAPS. Spam is only helped when someone who has spent so long fighting it is prevented from using his tools and from developing more tools. It seems that egotism or something very like it has now caused MAPS to do the wrong thing, and that's very unfortunate.

    later,
    Jess

    --
    I am programmed for etiquette, not destruction!
  9. Misconception...again by Dwonis · · Score: 5, Insightful
    Incidentally, the DUL is currently stopping CmdrTaco from directly emailing one of the Slash coders.

    Sigh. No it's not. (How many times does this need to be said.) The mail server CmdrTaco is trying to email is stopping him. The DUL is just a listing; it does no blocking.

    1. Re:Misconception...again by Senior+Frac · · Score: 2, Insightful

      It's an important distinction when the collateral damage victims go whining to the press.

      It reminds everyone that the administrator of the machine receiving the emails has chosen to use that list maintainer's recommendations as possible spam sources, and that they should be blocked.

      Without subscribers, all spam source listings are toothless. This isn't some evil government agency blocking your email on the sly. It's sharing of information, and only as good as the maintainer's policies and reputation.

    2. Re:Misconception...again by tunah · · Score: 2

      Jeez, read between the lines! 'Directly Emailing', 'Direct marketing by email' what's the difference?

      --
      Free Java games for your phone: Tontie, Sokoban
    3. Re:Misconception...again by Ioldanach · · Score: 2
      Jeez, read between the lines! 'Directly Emailing', 'Direct marketing by email' what's the difference?

      Well, there's the obvious, "marketing"... I.e., Direct marketing by email necessarily involves marketing (and by extension, most if not all spam goes here). Directly Emailing is a superset which includes the previous category, but if I work at a company with a T1 and send an e-mail to my friend, chances are I just Directly Emailed him, since my company's SMTP server connected to my friend's SMTP server. So you're reading way too much between the lines.

    4. Re:Misconception...again by macdaddy · · Score: 2

      Unfortunately Dwonis, we keep having to say it. I get really frustrated when some user thinks we're filtering their mail for them and they want me to stop. I always reply with the same piece of information. I tell them how many pieces of spam I've filtered from reaching their inbox since the beginning of the year. That always works. You'd be surprised how many there are per person. Oddly enough I've been using this same account for years and post it everywhere. I only get a tiny handful. The spammer's must have a "don't fsck with these people" list of something. ;)

    5. Re:Misconception...again by duffbeer703 · · Score: 2

      Cancer, gunshots and drowning doesn't kill you.

      You die when your heart stops and oxygen stops getting to your brain.

      --
      Conformity is the jailer of freedom and enemy of growth. -JFK
  10. The SPAM-L post: MAPS Sues Former Employee by Seth+Finkelstein · · Score: 5, Interesting
    Date: Mon, 6 May 2002 14:40:12 -0700
    Sender: Spam Prevention Discussion List
    From: Nick Nicholas
    Subject: COURT: MAPS Sues Former Employee and DUL Founder, Gordon Fecyk

    I have been a strongly outspoken supporter of MAPS for many years.

    When I was at pacbell.net I nearly had a heart attack when Paul Vixie called in 1997 to warn us that we were about to be listed in the MAPS RBL for running unsecured mail servers. But I supported his actions even then. Indeed, his call was very helpful in speeding up the bureaucracy at pacbell.net and getting the unsecured mail servers closed to relaying even more quickly. I appreciated Paul's willingness to work with us on resolving our problems.

    I wanted pacbell.net to use the MAPS RBL, but instead I was instructed by management to compile my own list. I felt my meager efforts could not compare to the quality of the RBL made available by MAPS, but, unfortunately, my own wishes were overruled.

    When Paul offered me the opportunity to become Executive Director of MAPS in December 1998, it was an offer I simply could not refuse, and for the next year and a half I was one of the leading cheerleaders for MAPS.

    Even though I left MAPS in August 1999, it was an amicable departure. Soon afterwards I was hired as Chief Privacy Officer for a company in the direct marketing industry, and I still continued to defend MAPS against its many critics in that industry.

    Last year I decided to write a book about the history of MAPS. My intent was to focus on the companies that sued MAPS and abused the legal system in order to prevent MAPS from exercising its legitimate free speech rights. I wanted to portray Paul and Dave Rand as beleaguered but slightly flawed heroes.

    However, my opinion of MAPS was forever changed this past April when it decided to sue DUL founder, Gordon Fecyk, after Gordon attempted to exercise a December 1998 contract he entered into with Paul Vixie in his capacity as MAPS CEO.

    My overview of this matter, as well as copies of court documents filed in the case, can be found at the following URL:

    http://www.lawsuitinfo.com

    It seems that MAPS has learned a great deal from the lawsuits brought against it by Harris Interactive and others, and has adopted the same slimy tactics. In particular, the affidavits filed by Margie Arbon and Anne Mitchell are full of factual errors and material misrepresentations. I will add my commentary on these affidavits at a later date.

    A hearing will be held in the Manitoba court tomorrow (5/7). We will add additional info as soon as possible.

    Gordon may have to sell his car in order to pay his not inconsequential legal bills. Is anyone interested in making a contribution to help Gordon with his legal expenses? If so, please send your contributions to Gordon's attorneys at the following address:

    Cassidy Ramsay
    385 St. Mary Avenue, 2nd Floor
    Winnipeg, Manitoba R3C 0N1
    CANADA

    Checks or money orders should be made out to Cassidy Ramsay

    Be sure to include a note with your contribution stating that it is on behalf of Gordon Fecyk in the Mail Abuse Prevention System v. Fecyk case.

    All contributions will be placed in a trust fund by the law firm and used solely to cover Gordon's legal expenses.

    Contributors will receive an acknowledgement from Cassidy Ramsay. However, all contributions are covered by attorney-client privilege, and thus the identities of contributors will remain anonymous. Information about contributions *cannot* be obtained by MAPS through the discovery process.

    I cannot describe how much it saddens me that it has become necessary for me to bring all of these disturbing facts to light, but I think it is essential for the Internet community to be aware of what MAPS has become. MAPS is no longer devoting its energy to fighting spam and co-operating with others in that fight, but instead is suing a former employee who attempted to exercise his legitimate rights pursuant to a contract with MAPS. I find it extremely ironic that an organization which is currently soliciting donations to its own legal defense fund would now be using its limited resources to pursue litigation against a former employee.

    Regards,

    Nick

    1. Re:The SPAM-L post: MAPS Sues Former Employee by Citizen+of+Earth · · Score: 2, Funny

      Even though I left MAPS in August 1999, it was an amicable departure. Soon afterwards I was hired as Chief Privacy Officer for a company in the direct marketing industry

      Darth Vader switched careers as well.

  11. This story is very DUL by wackybrit · · Score: 2, Funny

    Go on, laugh.

  12. Re:who cares by Jon_Katz+(Paranoid+F · · Score: 2, Informative

    Maps is used by over 5000 mail servers and ISPs worldwide.

  13. SPAM-L mailing list info, FAQ and archives by Seth+Finkelstein · · Score: 3, Informative
    Information about the SPAM-L list can be found at:

    http://www.claws-and-paws.com/spam-l/

    Search and archives are at:

    http://peach.ease.lsoft.com/archives/spam-l.html

    But you have to be a subscriber to use the above.

    Sig: What Happened To The Censorware Project (censorware.org)

  14. Interested in MAPS? Also Check out DCC... by jwiegley · · Score: 5, Informative
    I've used the MAPS tools in the past to check that my mail servers are properly configured to reject relays. But for actually stopping the 20-30 spam articles I get per day nothing has worked. (We all know what those dreaded "unsubscribe" "features" really do. don't we?)

    That is nothing worked until a few days ago. I recommend anybody that has spam problems, can run procmail or is in charge of a mail server running sendmail check out the "Distributed Checksum Clearinghouse" (DCC) at http://www.rhyolite.com/anti-spam/dcc/

    It took me some time to get the dcc sendmail milter dccm working correctly but, since I did, this has become my new best friend. Its catching 100% of spam targeted at me and rejecting it.

    From what I know about MAPS I think its a needed service to keep ISPs in check. But it seems targeted at attacking the delivers of spam and doesn't seem to provide much to directly protect the recipients of spam mail. DCC is the only solution I've found that accurately prevents spam mail from even being delivered to myself or users. I think this is necessary because if nobody actually receives spam the spammers will starve.

    So If you're like me and think spam is a rashy plague that you can't get rid of their is a cream available and it is named DCC. Check it out.

    --
    I will never live for sake of another man, nor ask another man to live for mine.
    1. Re:Interested in MAPS? Also Check out DCC... by mjh · · Score: 3, Informative
      Also checkout spamassassin. It scans all emails and applies heuristics to the email to decide whether or not it thinks it's a spam. Each heuristic has a score. By default, any total score above 5 marks the email as a spam.

      But here's the cool part. Spamassassin doesn't do anything with it. It simply marks it as a spam. Then you can use something like procmail to decide what to do with it. Me, personally, I store it into a folder called SPAM. I then configure my imap server (courier imapd) to treat that mailbox as a trashcan, and automatically delete anything in it older than 14 days.

      This allows me to check if there are any stragglers that get through, but also allows me to forget about it for a couple of weeks at a time. Spamassassin has been tuned to avoid false positives. I've been using spamassassin for months. During that time, I've not had a single email that was not a spam get marked as a spam. I've had emails that were spams get marked as non-spam (false negative). Which, if there's going to be an error, that's the kind I want. I'd hate to call a real email spam, have it sent to my SPAM mailbox and automatically deleted before I read it. The good news is that not a single false positive has occurred, although a few false negatives have occurred.

      So I've started using another tool to help deal with spam. It's called TMDA. It's somewhat more complex to setup and use than spamassissin. But a brief description is that it acts like an email firewall. Outgoing messages can be replied to, but incoming messages require that a person prove that they are a person. After which they'll be allowed unrestricted access to send me email.

      TMDA is much more exact than spamassassin, which is mostly complicated guessing. It successfully blocks every spam that spamassassin lets through. However, TMDA is also much more complex from an end user perspective. So it might not be for everyone. For example, I only use spamassassin on my wife's account - not TMDA because she's made it clear to me that she doesn't want to learn how to use it. I personally use both of them at the same time, and I've been 100% spam free for months. I used to get 20-30/day.

      $.02

      --
      Key to financial independence: Spend less than you earn. Save and invest the difference. Do it for a long time.
    2. Re:Interested in MAPS? Also Check out DCC... by Skapare · · Score: 3, Informative

      I want to keep spam from even so much as entering my server. How can DCC help in that case? I don't see how, being as I don't have the content to check against DCC with. Now if this check can be done during the SMTP delivery of the content, and be used to force a failure of delivery, well maybe that would work. Is this doable? Last time I looked at the DCC site, it wasn't even close to this.

      --
      now we need to go OSS in diesel cars
    3. Re:Interested in MAPS? Also Check out DCC... by gmhowell · · Score: 2

      Just set this up the other day on my personal system. And so far, it works. Granted, it's only been a few days, but I'm ready to change my procmail filter to point to /dev/null instead of /home/me/mail/checkifthisisreallyspam

      --
      Jesus was all right but his disciples were thick and ordinary. -John Lennon
    4. Re:Interested in MAPS? Also Check out DCC... by Skapare · · Score: 2

      Yes, that would do the job of keeping the mail on the server, and giving a 5XX to the spamware or the open relay. Any word on a Postfix version?

      --
      now we need to go OSS in diesel cars
    5. Re:Interested in MAPS? Also Check out DCC... by Skapare · · Score: 2

      These things should be done by dlopen(), dlsym(), call a specific function to filter/check data, and dlclose() ... instead of fork() and execve(). I've already discovered that dynamic web pages built from shared object files run much faster on the server than corresponding CGI even with the CGI program written in C.

      --
      now we need to go OSS in diesel cars
  15. What a surprise... they're unpleasant people! by brooks_talley · · Score: 5, Insightful

    Anyone who has worked with / for / against MAPS knows that they are primarily interested in fighting. Their original purpose was to fight spam, but they're just as into fighting folks they don't like and each other. As far as I can tell, they really don't care *who* they fight, as long as there's lots of name calling and moral outrage involved.

    MAPS is a joke. A classic case of the old saying about the pavement on the road to hell, and also a classic case of people thinking there's a technical solution to a social problem.

    -b

  16. DUL 'stopping mail'? by sloanster · · Score: 2

    "Incidentally, the DUL is currently stopping CmdrTaco from directly emailing one of the Slash coders."

    um, no - in this case, use your ISP's mail server.

    Problem solved.

  17. Re:Acronyms Abound by Jade+E.+2 · · Score: 5, Informative
    The DUL is not a blacklist in the sense that all mail from the listed IPs is refused. The DUL is used to refuse direct mail from those IPs, but mail relayed through another server is allowed. This prevents someone on a dynamic IP from spamming by directly connecting to the SMTP server of each target address, instead of sending all the mail through an open relay. Legitimate customers simply need to use their ISP's (or a 3rd party) SMTP relay (which presumably has message speed limits on it) to send mail, and it will go through.

    Yes, this prevents someone from running their own SMTP relay on a dynamic IP, but it's the only effective way of preventing such direct-to-target-server spam from going through.

  18. on really fixing email by drDugan · · Score: 2

    I can't help but look at these databases as a
    too-little, too-late patch to a broken
    system. My long term average for spam is now 7.2
    spams/day -- EVEN with working to try and
    prevent it. Why should I have to pay some
    company more to track people who spam?

    Can someone please present a way to overhaul
    the email system so that it works the way it
    was intended? Call it something else --
    something new -- direct, personal, intentional
    communication. (Cripes, they even have
    spambots now on IRC and IM too.)

    I'm groping here -- but what are the real
    steps we can take so that end users
    don't need to spend the money/time to defend
    against unwanted commercial mail?

    I'm thinking along the lines of new rfps for
    the way mail servers transport and
    authenticate mail / requiring digital signatures
    from your ISP / elimination of mail from
    spoofed IPs / elimination of all anonymous mail,
    even...

    where is the hangup in making (i.e. forcing
    technologically, not leagally) spam
    nonexistant?

    1. Re:on really fixing email by AnotherBlackHat · · Score: 2
      Can someone please present a way to overhaul the email system so that it works the way it was intended?


      I think the email system is already working the way it was intended.
      Near instant delivery at near zero cost.

      What you probably want is a system that overhauls email so that it works the way you want.
      I.e. you only get email that is of interest to you.
      Although there are several things that improve on the current situation, (Spam Wolf,
      Spam Assassin, Vipul's Razor...)
      IMO, the only long term solution is digitally signed email to identify friends,
      and a large fee for unknowns.
      The fee could be real cash, or hash-cash, or a donation to charity,
      or held in escrow, but the principle is the same -
      make it cost a lot to send email to people you don't know.

      -- Spam Wolf, the best spam blocking vaporware yet!
  19. Re:A sad day for the Internet by _Sprocket_ · · Score: 2
    When you cut&paste a referenced article and try to pass it off as your own... aren't you supposed to include the WHOLE article? Granted, its a long post. I guess just doing the top paragraph (with a tiny modification) is a quick, easy bite to swallow and hook the suckers with mod points, eh?


    Proof that "trolling" involves less bridges and more hook-line-and-sinker.

  20. Quick summary by enigma48 · · Score: 3, Interesting

    MAPS might have a few good points but in my wholly uninformed point of view, they seem to deserve to lose.

    To sum up 3 years:

    Gordon Fecyk: Hey Paul, here is the DUL - I'll even indemnify you of any damages because of the list.

    Paul Vixie: Great - I'll make you the maintainer of the DUL and we'll draw something up saying you can regain ownership of the DUL for $10 (the contract minimum in the US at the time). MAPS will take the good and the bad - all the publicity and all the legal trouble associated with it. When you want to leave, you can take the DUL back for $10.

    forward 3 years

    GF to Dave Rand/MAPS: I'm leaving. Here is $10. I have a recent copy of the DUL. I own it. You can use it free for a little while and we'll work out a contract after that. I'll even let you have first change to negotiate for it.

    MAPS to GF: Lawsuit.

    MAPS argues in the lawsuit that GF doesn't own the DUL and even if he did, he couldn't maintain it properly on his own, it causes legal issues with MAPS (privacy issues), saying that he owns it hurts MAPS, etc.

    If I was MAPS, I'd be protecting my income sources as strongly as possible. Not having followed the MAPS project/organization much and seeing they still accept donations, I would be worried too.

    The right thing to do would be to honour the agreement between Paul Vixie and Gordon Fecyk. If it bankrupts the organization, it is a sad thing but something could be worked out. (eg: cheap licencing - Gordon seems *very* reasonable)

    The wrong thing is to fight for your life and not even try to do the right thing first.

    Then again, if the DUL is a major source of income for them, I can't seem them caring much about doing the right thing. Morals are nice but survival comes first I suppose.

    My morals suggested I check google for a cached version of the DUL and post the link but it looks like google didn't get it in time. Anyone have links?

    Jeff

  21. The problem is, Gordon's "contract" isn't by TekPolitik · · Score: 3, Insightful

    It's quite clearly a pre-contractual negotiation. It clearly doesn't even contemplate acceptance in those terms. If there's no written contract, the thing Gordon points to as a contract would be evidence of what the terms are, but not conclusive evidence. If there's a written contract somewhere else, then unless those terms are in it, Gordon's out of luck.

    1. Re:The problem is, Gordon's "contract" isn't by TekPolitik · · Score: 2
      Of course there's more - there doesn't appear at any stage to be a transfer of ownership to MAPS, so it appears unlikely that MAPS *ever* owned the DUL. It appears what they got when they hired Gordon is his services plus the use of the DUL.

      So here's what needs to be shown: (1) by MAPS, an unequivocal statement by Gordon assigning ownership of the DUL to MAPS; (2) by Gordon (but only if MAPS can show (1)), a contract granting him the option to buy back.

      Neither of these things appears to have been shown.

      I think Gordon should make a counter-claim for the $10 as money paid under a material mistake of fact.

  22. Re:Acronyms Abound by TekPolitik · · Score: 3, Informative

    It's also worth noting that the DUL is the most valuable part of the MAPS services in that it blocks more spam than the other parts. Without it, MAPS will almost certainly lose customers.

  23. Re:Acronyms Abound by ZxCv · · Score: 2

    So how does it know whether the mail was relayed through a server first? By checking headers? Or does it have to do with the IP of the machine sending the mail? Headers seem like a ludicrous way to do it (too easy to fake), so I would hope thats not it, but this is the first I've ever heard of DUL so I'm not sure.

    --

    Perl - $Just @when->$you ${thought} s/yn/tax/ &couldn\'t %get $worse;
  24. Because that's how Unix email works by billstewart · · Score: 4, Insightful
    Taco's probably using a Linux system, with some popular Mail Transfer Agent like Sendmail or Postfix or [3 or 4 others] that are smart enough to be able to deliver mail without needing help, like just about any other Unix machine since we started using domain names in the mid-1980s. If you're on the DUL, your main net connection is probably dialup or DSL or cable modem, so you're a MERE LUSER instead of owning a T1 all your own, but so what? You've got a computer with a Real Operating System, and there's no need to pretend you're a Windows-using couch potato that's running a mail client too dumb to deliver its own email - even if you are running a dumb client, sendmail on 127.0.0.1 fixes that problem.

    In other words, Taco does have an smtp server of his own to access. On his own machine. Like he should. If you're a dialup user, it's beneficial to have an inbound mailbox server somewhere that's always connected, whether it delivers the mail to you by SMTP or POP/IMAP. But no need to do that for outbound.

    The reason the DUL is helpful for blocking spammers is not because there's no legitimate reason for a dialup user to run SMTP - it's just that many of the popular clients use a relay so they don't have to handle error messages or hang out trying to deliver to slow servers or delay delivery on temporarily unavailable servers, and that many spammers abuse cheap disposable dialup accounts, but they get booted off of their ISPs' mail servers too fast to make them practical, or rate-limited, so they deliver their own email so they can reach more suckers before being squashed.

    Some ISPs block outgoing Port 25 that doesn't go through their servers - really annoying if you've got more than one ISP account, and don't like having to reconfigure your machine just because you're dialing in from work or on the DSL at home instead of the other dialup.

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
    1. Re:Because that's how Unix email works by Hard_Code · · Score: 2

      Right, some random free email address is JUST what I trust when communicating with coworkers.

      --

      It's 10 PM. Do you know if you're un-American?
    2. Re:Because that's how Unix email works by arkanes · · Score: 2

      It's not just dialup - my cable modem IP (at least one of them anyway, it's dynamic) is in the DUL list. It was a minor pain in the ass, but sending outgoing mail via my own machines is a convenience, not a neccesity.

  25. it will never be nonexistent by ZxCv · · Score: 2

    I don't think there will ever be a truly viable technical solution to spam. Spam is not so much a technical problem as it is a social problem. And we all know about trying to cure social problems with technical solutions. It's the same as with digital piracy--implement some new system or some new restriction and those that it was intended to take care of will be the ones that find a way to get around it.

    --

    Perl - $Just @when->$you ${thought} s/yn/tax/ &couldn\'t %get $worse;
  26. Re:Acronyms Abound by mpe · · Score: 2

    The DUL is not a blacklist in the sense that all mail from the listed IPs is refused. The DUL is used to refuse direct mail from those IPs, but mail relayed through another server is allowed. This prevents someone on a dynamic IP from spamming by directly connecting to the SMTP server of each target address, instead of sending all the mail through an open relay. Legitimate customers simply need to use their ISP's (or a 3rd party) SMTP relay (which presumably has message speed limits on it) to send mail, and it will go through.

    Third party relaying wasn't even in the original SMTP spec. Even though it is now mentioned there is no requirment for any MTA to support either using or acting as a third party relay at all.

    Yes, this prevents someone from running their own SMTP relay on a dynamic IP,

    It dosn't need to be any kind of relay, a mail originator which conforms 100% with thre relevent RFCs will also be given problems.

    but it's the only effective way of preventing such direct-to-target-server spam from going through.

    Given the chance most spammers would use a third party relay, including an ISP provided one. Since this protects their identity and their machine. Indeed techniques such as Telegrube are easily defeated by using a third party relay.

  27. Re:Acronyms Abound by blowdart · · Score: 3, Informative

    It drops any connections from any IP address within the list. It doesn't check any headers, it just checks the IP address of the connecting machine.

    So, for example,

    a) if dialup user a sends through an smtp server on dialup user b's box, it gets rejected, as the smtp server is running on dialup space.

    b) if dialup user a sends directly to an smtp server using the DUL, it gets dropped again

    c) if ddialup user a sends to smtp server on dialup user B, which in turn forwards and relays properly through his ISPs SMTP server, it will get through, as the ISP SMTP server will not be in the DUL.

  28. Re:Spews is a solution worse than the problem itse by blowdart · · Score: 2

    It's like living in a society where you go to jail for the crime your neighbor commits.

    No, its like paying a criminal boss who happens to employe burglars. If you're paying, you're supporting spam. Tough shit.

    People often get listed simply because their domains are used in forged email addresses and/or forged HELO headers

    Care to offer links or evidence to that?

    SPEWS' philosophy is that once a domain is used for spamming, it's blacklisted forever

    Utter bullshit. None of the mainstream spam blacklists run on a domain basis. It's done on an IP block basis.

    SPEWS is run by a bunch of shady and unaccountable people.

    Shady no. It's run by a group of international news admins. Unaccountable, perhaps. But when black lists keep getting sued by spammers, then what else are you going to do.

    SPEWS fights spam by exerting a heavy burden on innocent people who unknowingly become associated with spammers

    Unfortunately, this is the only way to get ISPs to take notice these days. SPEWS is based on collateral damage. However the fault lies with the ISPs, not spews.

    would advise anyone who cherishes the democratic values of our society to stay away from SPEWS

    It's my democratic right to use it or not use it. SPAM is not a right. It's not a free speech issue. You do not have a right to communicate with my servers. Oh, and remember, the internet is international. Not all of us hold your consitution so dear.

  29. Re:How do I figure out IP blocks for entire countr by LWolenczak · · Score: 2

    I would like to block, China, Korea, and Singipore.

  30. Re:How do I figure out IP blocks for entire countr by Skapare · · Score: 2

    Download the data from the APNIC, TWNIC, KRNIC, etc. FTP sites, convert to your mailer's file format, and let it use that to look up each IP address. That's what I do for my Postfix mail servers.

    --
    now we need to go OSS in diesel cars
  31. Re:Acronyms Abound by weave · · Score: 2
    Yeah, this DUL crap prevented me (as a former @home customer) from just using my own sendmail server to send out my e-mails, since the no good piece of flock() @home server was constantly down.

    Of course, due to DUL use in some places, my e-mail would bounce when trying to send to them. :(

    I'm not really bitter against DUL users. The spam shit is out of hand and you do what you gotta do. It's just one more reason to hate selfish spammers who are ruining the net...

  32. Rob should be using his ISP's SMTP server by alexburke · · Score: 2

    Incidentally, the DUL is currently stopping CmdrTaco from directly emailing one of the Slash coders.

    That's because he's trying to connect to the coder's ISP's SMTP server directly to send the mail. That SMTP server sees that Rob is coming in from a dialup pool and refuses the mail, as it bloody well should.

    Solution: Rob should be using his ISP's SMTP server.

    1. Re:Rob should be using his ISP's SMTP server by alexburke · · Score: 2

      Why the hell should dialup users do MX lookups themselves? Dialup users should send their outgoing mail via SMTP to their ISP's mail server and let it do the work.

      There is almost never a legitimate reason for dialup clients to be doing direct delivery of mail!

    2. Re:Rob should be using his ISP's SMTP server by frost22 · · Score: 3, Informative
      There is almost never a legitimate reason for dialup clients to be doing direct delivery of mail!
      Hogwash. My ISP places a number of restrictions on my use of his Mail Relay (among them encoding my customer number in the headers - say goodbye to pseudonymous mail - an upper limit of mails / day and stuff like that.) I don't like these restrictions. My ISP has a monopoly. No choice for me to get broadband from somehwere else.

      --
      ...and here I stand, with all my lore, poor fool, no wiser than before.
  33. Doo yoo reely whant emale phrom CmdrTaco? by WIAKywbfatw · · Score: 3, Funny

    Incidentally, the DUL is currently stopping CmdrTaco from directly emailing one of the Slash coders.

    Lucky Slash coder. That's one less email sender who's message he'll have to decipher from proto-Pigeon English to the real thing...

    --

    "Accept that some days you are the pigeon, and some days you are the statue." - David Brent, Wernham Hogg
    1. Re:Doo yoo reely whant emale phrom CmdrTaco? by rodgerd · · Score: 2

      I think you meant "pidgin".

      Of course, I suppose that could be irony at work...

  34. www.orca.bc.ca/dul/ was archived by alexa by blowdart · · Score: 2, Interesting

    http://web.archive.org/web/20010619203232/http://w ww.orca.bc.ca/dul/

    Fun to see the name change from ORCA.BC.CA DUL to MAPS DUL in progress.

  35. Re:Acronyms Abound by karmawarrior · · Score: 4, Insightful

    It also has the worst false-positive rate. Typically, most Linux distros I've seen are set up to send their own email rather than rely on a third party email relay to send it. The DUL ensures that machines set up in this default fashion, despite not being set up as relays, will not be able to deliver perfectly legitimate email.

    Essentially, for something to be useful against spam it has to reject as much spam as possible while leaving as much legitimate email as possible alone. The DUL may succeed on the first ground, but it fails miserably on the second. It also promotes ignoring RFCs, as relaying was never blessed as the way for ordinary users to send email.

    You can reject spam by setting up your mailbox as a softlink to /dev/null. I wouldn't encourage it though, and I wouldn't encourage use of the DUL for the same reason.

    --
    KMSMA (WWBD?)
  36. not funny by Ender+Ryan · · Score: 2
    Really, this is the most insightful post I've ever seen regarding these people. I was planning to post nearly the exact same thing, and I certainly didn't mean for it to be funny.

    Just try dealing with these people, or the many others doing the same thing, and you will understand exactly what I mean.

    I don't even want to talk about my dealings with them... just don't feel like talking about it...

    --
    Sticking feathers up your butt does not make you a chicken - Tyler Durden
  37. MAPS making ISPs Email Monopolies? by nn43 · · Score: 2

    I believe some day MAPS and DUL will make the major ISPs monopolies of email delivery.

    ISPs are consolidating into larger and larger groups of users under a smaller and smaller set of companies.

    ISPs help out by blocking port 25 from regular users.

    MAPS knocks out the dial in users.

    As one message notes, entire countries are blocked from sending email.

    MAPS, while a good idea in a growing thriving ISP world, is not a good idea in a shrinking ISP world.

    MAPS will destroy the email internet as we know it in a few years.

    1. Re:MAPS making ISPs Email Monopolies? by Erik+Fish · · Score: 2

      Actually MAPS is on it's way out. It lost a lot of support when it started charging and this lawsuit isn't likely to win it any friends.

      SPEWS is the current favorite because unlike MAPS it doesn't pussy-foot around trying to "educate" spammers and their hosts.

      Beyond any of this though, MAPS only blocks those who spam and (in the case of the DUL) those who are trying to use their dial-up lines to send e-mail directly (rather than going through a mail server on a static IP). While MAPS has in the past shown favoritism towards large companies (giving them ridiculous amounts of time to clean up), they don't block small companies because they're small.

      So no, Chicken Little: The sky is not falling.

  38. CmdrTaco by macdaddy · · Score: 2, Flamebait

    This isn't in response to the actual article. This is in response to the comments made about the DUL stopping CmdrTaco from mailing one of the slash coders. It really pisses me off when some dumb son of a bitch thinks they have the right to directly send an email from their dialup account. People seem to think that their providers MTA is there for looks. People don't understand that a significant amount of spam can be blocked by only allowing one providers MTA to talk to another. Frankly I think there should be a mandatory MTA registration process like there is for DNS servers. You must register your MTA before you can mail. This would require valid abuse contact information and things of that nature. The 'Net isn't meant to be plug and play. I block 100,000 pieces of spam per week at an ISP I consult with (give or take usually 10k depending on the time of year). I use 6 different DNS blacklists and a lengthy Sendmail access list of spamming domains and netblocks to do this for me. About 2 years ago the DUL was blocking by far the most spam of all the blacklists (for me). Then raping of open relays became really popular and the hits on the RSS rose dramatically. Now the DUL gets on average about 3000 hits per week. Every so often that number will sharply increase because some spammer decided to direct-to-MX spam us. Well we're one of many providers that doesn't take that shit. Hence the DUL. I'm getting sick of ranting here, so I'm done.

    1. Re:CmdrTaco by Rupert · · Score: 2

      Where do I register my DNS server? It's at 192.168.192.8

      --

      --
      E_NOSIG
    2. Re:CmdrTaco by frost22 · · Score: 2
      It really pisses me off when some dumb son of a bitch thinks they have the right to directly send an email from their dialup account

      It really pisses me off when some dumb son of a bitch thinks he has the right to tell me what to do with my computer.

      It really pisses me off when some dumb son of a bitch thinks his personal pet peeve (here: spam prevention) is so much more important than everything else that the whole world has to be changed to accomodate his wishes.

      And finally, it really pisses me off when said dumb son of a bitch not only entertains all these delusions but also fails to think what kind of internet he creates in pursuit of his goals, with second class citizens under strict and draconian ISP rule.
      Frankly I think there should be a mandatory MTA registration process like there is for DNS servers
      There is no such thing as a "mandatory DNS server registration process". Whoever pays you for consulting is royally wasting his funds.
      --
      ...and here I stand, with all my lore, poor fool, no wiser than before.
  39. Re:Acronyms Abound by karmawarrior · · Score: 2

    No, actually it's false-positive rate is almost exactly zero.

    Well, I assume myself and CmdrTaco are not the only two people having legitimate, non-spam, emails blocked by people using the the DUL. I've had several rejected by Netcom and I assume CmdrTaco has had more than one blocked too from the nature of his complaint, so I'm assuming "Almost exactly zero" is accurate for quite a wide range of "almost exactly".

    So you're saying that a misconfigured machine is the problem of the DUL? Dial-up users should never run their own mailserver without smart-host.

    No on both counts. The RFCs have never suggested that relaying is the legitimate, "correct", way of sending email. It's nice that ISPs provide relays, it means you can have dumb email clients, but show me the RFC that makes their use compulsory, or even recommends them.

    You can't. The RFC does not exist. The DUL provides a means to block email on the basis of a criteria that has nothing to do with spam.

    A machine that is configured to deliver its own email when connected to the Internet is correctly configured according to the RFCs. A machine that isn't needs support that is usually there, but doesn't have to be. Punishing users for doing it properly is a poor, inane, idiotic thing to do.
    --
    KMSMA (WWBD?)
  40. Re:Acronyms Abound by macdaddy · · Score: 2
    Actually in practice I've found the DUL to get the least amount of hits of all of them. Now it does it's job well every so often when a massive amount of direct-to-mx spam hits us, but it's usually fairly low in comparison. As an example, here's my breakdown this week for the provider I consult with:

    .....

    Well I was going to post our counts for you but the Slashdot Lameness filter decided I shouldn't bother. For us the RSS always gets more hits. I've never used the RBL or any of the other so I can't compare to the other MAPS lists.

    PS, It's worth noting that the Slashdot "Lameness filter" is an absolute piece of shit. Whoever wrote it should be flogged with old Sparc keyboards. Thanks for giving us a list of "junk characters" asshole. Feedback is a wonderful thing isn't, dick?

  41. Don't tell, ASK! by mcrbids · · Score: 2
    I've been fighting SPAM for years. I've complained to numerous ISPs, I've done untold numbers of traceroutes and the like to identify parent networks, and the whole gig.

    But MAPS just seems too draconian for my taste! I've never liked the idea, as it's just too much of a shotgun approach to the problem. We need something more surgical.

    SPAM filtering results in false positives. It's like having emails deleted for you at random.

    Then, I discovered ASK (Active Spam Killer). This thing ROCKS!

    ZERO false positives. ZERO false negatives. (so far, out of hundreds of junk mails)

    In order to use it, you pretty much have to sit at the command prompt on your mail server as a local user, but it's effectiveness is (so far) flawless!

    --
    I have no problem with your religion until you decide it's reason to deprive others of the truth.
  42. This is why I hate MAPS and DUL by Ark · · Score: 3, Insightful
    Incidentally, the DUL is currently stopping CmdrTaco from directly emailing one of the Slash coders.

    No, its not DUL preventing our fearless leader from sending e-mail, its the admin of the box using DUL.

    This is why I hate things like DUL and MAPS that block everything and are prone to false positives that keep you from even seeing the mail. Stuff like spamassassin can take MAPS and DUL into account and add "spam" score based on that, but at least with spamassasin the mail isn't completely toss away, you at least have the filter it to a "spambox" you look at like once a week for the false positives and/or you can put CmdrTaco on your white list, so he doesn't ever register as spam.

    Spamassasin is a much better solution, IMHO.

  43. MAPS == Intellectual Property Pirates by kindbud · · Score: 2

    MAPS RBL was assembled from user contributions. It would be nothing without the data submitted by thousands of users over the course of several years. I contributed reports to it.

    When they got a fat enough database, they changed their tune and wanted to charge me to use the data we researched and gave to them, thinking we were benefitting the whole community. How wrong we were. That was the first death-wheeze as far as I am concerned. This story is just the latest labored breath by what will soon be the corpse of MAPS. And good riddance. They won't be missed.

    --
    Edith Keeler Must Die
  44. The DUL *sucks* by 0x0d0a · · Score: 2

    what is the DUL

    The DUL is a fecking stupid POS service set up primarily to screw over the sorts of people that don't use Windows, don't sit behind a corporate firewall and don't shove all their stuff through a corporate mail gateway using Outlook.

    The DUL is a system designed so that any mail incoming from any IP know to be a dial-up address is immediately dropped. Needless to say, it's not tremendously popular with those of us who move around from Internet connection to Internet connection and would prefer to just use the mail server on our computer instead of having to remember to change the mail gateway each time we move.

    I had a friend that worked at Compaq all summer. They used the DUL, and though I could send mail to *everyone else I knew*, sending mail to him was just throwing mail into a black hole, since I was on a modem and the DUL flagged me. Frankly, I find it tremendously amusing that Compaq is now going under.

    The DUL is pretty much designed solely to destroy the peer-to-peer nature of the Internet and force everyone to have an ISP with a mail gateway if they want to even send mail. What's next, requiring Web connections to come from a proxy, because any "worthwhile users" use a proxy and someone else might be just a worm spreading around?

    I *hate* the DUL. It's caused me far more misery than all the spam I've ever recieved put together. If MAPS is taking it in the ass, I'm just going to sit here and chortle about it.

  45. Re:Acronyms Abound by karmawarrior · · Score: 2

    It's not a matter of it being allowed by the RFCs, is the fact that the RFCs imply it's the RIGHT WAY OF DOING THINGS. The entire concept of relaying only came up in recent revisions of RFC821, and only then as a "This is possible" sense, not a "This is how you're supposed to do it." Nor is your comparison valid: This like rejecting email where someone has issued the HELO command when connecting to your SMTP server, or rejecting any email that arrives via TCP port 25, rather than rejecting email where you see something in the content you dislike.

    Regardless, valid email is sent this way, and precious little spam (spam, remember, is meant to be sent to hundreds of thousands of users, something which is pretty much impossible on a DUL.), so your criteria for rejecting emails is not only wrong, but ineffective.

    Give it up. Correctly configured machines send email this way. You're rejecting valid email. Your filter does not work as intended, you need a different filter.

    --
    KMSMA (WWBD?)
  46. Re:Acronyms Abound by frost22 · · Score: 2
    Just because the RFCs allow it, doesn't mean that it has to be considered "valid". Emails with virii may (though often don't) conform correctly to RFCs, but I'll reject them if I can detect them.
    So what? I want to send an email. Somebody refuses that mail although it is neither spam nor elsweher illegitimate.

    Ths means he refuses perfectly valid mail. q.e.d.

    There's two solutions-- get a static IP from your ISP which they have not listed on the DUL-- case solved. Or relay through a static IP which is not listed on the DUL-- case solved. Otherwise, I and many many many other people will reject it, because while it conforms to the RFC, we do not consider it valid.
    Let me bluntly state you are an arrogant asshole. Because you know many of us don't have these choices. If we go through our ISP's relays we have to subject ourselves whatever ludicrous restrictions he puts on this usage, and static IPs are something just not available for an ordinary private citizen in many parts of the world (including the one I live in).

    So your "solutions" amount to that french queen's suggestion "let them eat cake". And we all know how that lady ended.
    --
    ...and here I stand, with all my lore, poor fool, no wiser than before.
  47. Jamie: please get a life. by Doktor+Memory · · Score: 2

    "The DUL" isn't stopping you from mailing anybody. The thing stopping you from emaling your unnamed slash coder is the fact that his ISP has chosen to block mail based on the DUL. If this is such a pain in the ass, one or both of you should vote with your dollars and feet: either he should move to an ISP that doesn't use the DUL, or you should stop being a cheap bastard and trying to run a mail server from a dynamic IP address.

    Why is trolling a bad thing when done in comments, but apparently entirely acceptable when done by editors in story submission addenda?

    --

    News for Nerds. Stuff that Matters? Like hell.

  48. DUL side-effects... by wowbagger · · Score: 2
    I unwittingly caused a flame on WineHQ because of the DUL - my ISP had implemented filtering, and I did not know it, and one of the other users of WineHQ tried to contact me and got rejected.

    I would say that IF you are filtering with the DUL, you should
    1. Tell your users
    2. give them a chance to opt-out
    3. Set up a (properly secured) webmail form to shunt around the block
    4. set your mail server to send the URL for that webmail in the rejection message


    However, I do agree that the best solution is to use your ISP's mail server, and have your box set to forward the mail to your ISP's server - they (by definition) have better connectivity than you do, and their mail server can be trying to deliver the mail while you are installing a new kernel or whatever would cause your machine to reboot.

    Ideally, distros would have this be a part of the normal setup - when you install any MTA, it should ask you if you want to forward your outbound mail to a different server.
  49. If you wanna know what spam software sellers say by LennyDotCom · · Score: 3, Interesting
    --
    http://Lenny.com
  50. IT's easy by mindstrm · · Score: 2

    for an armchair activist like yourself to say this, but reality is quite a bit different.

    You might think it's so simple, but I guarantee you have no idea what things are really like.

    The ISP has no motivation to change; they are a monopoly. They get the business regardless of what they do or do not do. The ISP is the national carrier. You can't set up a second ISP, you can't get bandwidth from somewhere else.

    OH! Wait! LEt me get this straight.

    By your logic....
    Why aren't France Telecom and alter.net on the list? After all, they sell us the bandwidth. Why? Because they are main carriers.

    This is not like an ISP being blacklisted.. this is like an entire national carrier being blacklisted.

  51. Wow. by mindstrm · · Score: 2

    Did you not read what I said?

    I support completely your right to filter out what you want. Absolutely. I also support the right of lists like spews to exist.

    My problem is just that we *can't* pressure ICE/RACSA. There is no competition. There is no way to financially impact them. They don't WANT our money. They have as much business as they can handle already.

    Believe me, if we had a choice, many businesses here would go with someone who does not support spam. We would gladly shop with our dollars, and put pressure on the company.

    But with a government enforced monopoly that is *absolute*, there's basically fuck all we can do to pressure them.

    It's your server, your rules. Feel free to block the entire country.

    And my ISP is not RACSA. It's ICE. (ICE is the telco, RACSA is the domestic ISP., We get our bandwidth from ICE directly)

  52. No. by mindstrm · · Score: 2

    Actually, I'm not, though it may be confused IP-wise with ICE.

    I deal with ICE directly.. the national telco.
    I am not a racsa customer.

    IF you think spews turns this into a big lan.. you are sadly mistaken. It has an effect, yes, but only a minor one overall (currently)

  53. Re:Acronyms Abound by AndroidCat · · Score: 2
    Ths means he refuses perfectly valid mail. q.e.d.

    Spam is perfectly valid email. (Except when the headers are forged.) Having an open mail relay is perfectly valid. That doesn't mean that they're acceptable on today's Internet.

    --
    One line blog. I hear that they're called Twitters now.
  54. Wrong! by tweakt · · Score: 2
    Incidentally, the DUL is currently stopping CmdrTaco from directly emailing one of the Slash coders.

    No, the slash coder's ISP is stopping Cmdr Taco's email from being delivered. It's *NOT* the DUL/MAPS thats doing it. Don't blame the blacklist for blocking people, blame people who use the blacklist to block people.

    Here's a novel idea... use your ISP's smtp relay to send email. DUL tracks blocks of dialup/customer IPs. Normally emails DO NOT originate directly from these addresses to the final destination unless something fishy is going on, or the customer runs their own mail server. At either rate, simply route your outbound mail through your ISPs smtp server and your fine.

    Wow, how hard was that?