Slashdot Mirror


O'Reilly Article on Spam Defense

Dru writes "Here's an article talking about the details of implementing a network level spam defense with Qmail. It also talks a little about a new site called Trustic which uses a trust system (like Advogato) for nominating spammer/hostile IP's."

3 of 189 comments (clear)

  1. Great by The+Bungi · · Score: 5, Interesting
    new site called Trustic which uses a trust system

    Another blacklist (with an appeals process). Run by a guy that made his millons selling eGroups to Yahoo!.

    Dunno, this doesn't look too promising.

  2. Re:Just junk SMTP? Not Possible by Xerithane · · Score: 5, Interesting

    Its simply too late to dump SMTP. If we would have thought about this 5 or so years ago it maybe would have been possible but now we have so many using this system its inpossible to change to a newer standard.

    Just like gopher with http? You can also add a plethora of validation ontop of SMTP. SMTP, as a protocol, isn't bad. It's possible to add validation, to only accept from SMTP servers that use some sort of valid key.

    Then you get to keep SMTP, and slowly migrate servers. Setup a non-profit organization for distributing SMTP authentication keys that are unique to the mail server (think SSL) and if the mail comes from that server is spam, you just block that servers key. If the server doesn't have a key, put it into a validation list or send backa response saying they need to use a mail server that supports signed-SMTP.

    Easy solution, not a complete overhaul of SMTP. The problem comes in with who signs the certificates, because then you have to trust the source that delivers them. Like Verisign, et al.

    --
    Dacels Jewelers can't be trusted.
  3. Re:Distrustful of Network Level Censorship by Jahf · · Score: 5, Interesting

    and SPAM is WORSE, WORSE, WORSE!

    If you want to receive the junk, don't use one of those services, but I fail to see how someone else choosing -to- is a problem.

    Your analogy is flawed. I have a choice to use AOL|Hotmail|MSN|spamassasin|etc and I pay for the connection to download, view, respond and delete my email (not to mention the time it takes out of my day). I don't have a choice whether or not to use the USPO and it takes FAR less of my time to sort out my real mail than it does email.

    If SPAM could somehow be filtered out at the router level, then I would agree with your USPO analogy and would be throwing an utter FIT. But it isn't possible (is that a web page or a webmail, is that IMAP, is that secure IMAP, is that POP3, is that email tunnelled over SSH ... no way).

    Until there is legislation with -teeth- and a way for the little guy to prosecute you are not going to see many people agree with you about server side filtering.

    --
    It is more productive to voice thoughtful opinions (reply) than to judge (moderate) others.