On Wed, 2008-02-06 at 16:26 +0100, Sandy Drobic wrote:

Teruel de Campo MD wrote:

...

ref: http://www.alphaworks.ibm.com/tech/fairuce

Does anybody uses fairuce as antispam tool?

Never heard of it before, but there's a lot of software I haven't heard of yet. (^-^)

For Postfix there's a well-tested solution, that practically covers the same concept: policyd-weight, a policy-plugin for Postfix. http://www.policyd-weight.org/

It evaluates ip address in relation to hostname, helo and a lot of other checks like RBLs etc. similar to SA, so the decision to reject/accept a mail is based on the weighted result of many checks.

Sandy, Great!. I will look into it. I have the same e-mail address since about 1987 or a little later when IBM started their isp, so I am in every spams list, which is good because I do not have spent any time hiding it :-) I do pretty well using a mail monitor with many regular expression but I though the approach from fairuce was very interesting and most likely very effective. Your pointer is similar. Thxs! -=terry=- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Sloan wrote:

Teruel de Campo MD wrote:

...

ref: http://www.alphaworks.ibm.com/tech/fairuce

Does anybody uses fairuce as antispam tool?

This is the first I've heard of it - I've been making do with postfix+policyd, spamassassin, razor, clamav...

Hmm, the webpage is dated 2004, looks like fairuce never really took off.

ARRGH!! I just took a closer look and immediately saw the reason why: it's a challenge/response system. Tools like that are extremely aggravating for actual endusers (I would never reply to a challenge/response mail!) and impossible for automated systems. This mailinglist for example would not work with fairuce, or to be fair, it wouldn't work under certain circumstances that many participants of the list are using: if you forward your mail to another server. If that server had fairuce implemented, it would start to spout hundreds of chall/resp mails back to the sender... right! The sender of these mails is something like: opensuse+bounces-50130-suse-linux-e=japantest.homelinux.com@opensuse.org The mailinglist manager would probably treat it as a bounce and "reward" the deserving recipient with an unsubscribe after processing some of these mails. (^-^) -- Sandy List replies only please! Please address PMs to: news-reply2 (@) japantest (.) homelinux (.) com -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Teruel de Campo MD wrote:

...

ARRGH!! I just took a closer look and immediately saw the reason why: it's a challenge/response system.

Tools like that are extremely aggravating for actual endusers (I would never reply to a challenge/response mail!) and impossible for automated systems. This mailinglist for example would not work with fairuce, or to be fair, it wouldn't work under certain circumstances that many participants of the list are using: if you forward your mail to another server. If that server had fairuce implemented, it would start to spout hundreds of chall/resp mails back to the sender... right! The sender of these mails is something like:

opensuse+bounces-50130-suse-linux-e=japantest.homelinux.com@opensuse.org

The mailinglist manager would probably treat it as a bounce and "reward" the deserving recipient with an unsubscribe after processing some of these mails.

You can make exceptions like mail-list etc but I realized of these type of problems and that's why I was wondering if anybody had any experience before I implemented. Thxs again for your tips postfix

The trouble with this solution is, that it requires too much exceptions and knowledge what kind of mailing lists autoresponders etc. the users of the system are using. If you are the sole administrator and user of such a system then you won't have a problem. But in that case you probably won't have a spam problem either that would require such a plugin. If you have only hundred users you do not know any more what communication partners your users are corresponding with, and every day you will have to check which autoresponder from a hotel chain or airline had been rejected. There are a lot of misconfigured systems out there. If you have to maintain a multi-domain multi-customer server with thousands of users, you will spend all your time with customer-care and none on productive work. In short: this solution does not scale at all. -- Sandy List replies only please! Please address PMs to: news-reply2 (@) japantest (.) homelinux (.) com -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org