[KLUG Members] blacklist, whitelist

Daniel members@kalamazoolinux.org
Tue, 7 Jan 2003 16:13:04 -0500


Oh, I agree to a point.

1) Yes, they can do this, but once they do, you can use one of their other attributes to blacklist them. This is by no means a perfect system, but it has cut down on the SPAM reaching my mailbox by a huge amount. A few SPAMmers are even lame enough to take the time to respond and get added to my whitelist automatically - hence the reason for me manually reviewing my whitelist everyday.

2) I disagree - there is no "click me" or attachment associated. Remeber, we can only protect those that are smart enough - if someone blindly clicks some link because it looks like it came from a friend, it is their own damn fault. I agree that many people will just delete it, but I guess that is motivation to make sure you have a good whitelist. ASK even includes a small script to add the addresses of anyone in your current mailbox to your whitelist for laziness' sake.

I am not saying this is perfect, but so far it works for me for my personal use. I would never use it to filter my work mail or customer's email. You can see how much SPAM it catches and puts into a queue for me to check later right here:
http://mrtg.netophilia.net/spam/ask-queue.html

I used to have to take at least an hour to comb through SPAM each AM, now I get the important stuff right away and check my queue at my leisure.


bill extolled:
> >From my standpoint, the problem with this "send an e-mail to confirm this isn't spam" approach is that it assumes everyone will
> recognize the confirmation e-mail is legitimate.
> 
> Their program's lifespan is limited until the time either:
> 
> 1) a spammer begins to use headers, subjects, etc. to look like the confirmation e-mail.
> 
> 2) a virus writer creates a virus to look like the confirmation e-mail.  What a boon to virii this will be once everybody is trained
> to respond to these e-mails.  Remember, they're already skilled in stealing names from your address book, so a note seemingly from
> your good friend Joe saying "click here to confirm you send e-mails to me" is going to open pandora's box.
> 
> kind regards,
> 
> bill
> 
> Daniel wrote:
> 
> > I think this may help you out - can interact with just about anything, I have it working with procmail with no problems so far...
> >
> > http://www.paganini.net/ask/
> >
> > bill extolled:
> > > If I use fetchmail within a local network to get e-mail from POP servers on the
> > > web and dish it out internally, can I use sendmail or something similar to block
> > > (or mark, or forward to someplace) certain senders (blacklist) and always allow
> > > other certain senders to always go through (whitelist) ?
> > >
> > > kind regards,
> > >
> > > bill hollett
> > >
> > > _______________________________________________
> > > Members mailing list
> > > Members@kalamazoolinux.org
> > > 
> >
> > --
> > ---
> > Dan
> > _______________________________________________
> > Members mailing list
> > Members@kalamazoolinux.org
> > 
> 
> _______________________________________________
> Members mailing list
> Members@kalamazoolinux.org
> 

-- 
---
Dan