1997-01-03 - Re: Hardening lists against spam attacks

Header Data

From: Eric Murray <ericm@lne.com>
To: fod@brd.ie (Frank O’Dwyer)
Message Hash: fdefacb124132f0e8a09a059d35427da5dc56885251b988165945ae8d6be066b
Message ID: <199701032232.OAA24347@slack.lne.com>
Reply To: <199701031110.LAA31173@brd.ie>
UTC Datetime: 1997-01-03 22:35:32 UTC
Raw Date: Fri, 3 Jan 1997 14:35:32 -0800 (PST)

Raw message

From: Eric Murray <ericm@lne.com>
Date: Fri, 3 Jan 1997 14:35:32 -0800 (PST)
To: fod@brd.ie (Frank O'Dwyer)
Subject: Re: Hardening lists against spam attacks
In-Reply-To: <199701031110.LAA31173@brd.ie>
Message-ID: <199701032232.OAA24347@slack.lne.com>
MIME-Version: 1.0
Content-Type: text/plain

Frank O'Dwyer writes:
> > [...] the drivel that comes from some of our more prolific posters is
> > best handled by filtering by the list members themselves.  (I currently
> > have 3 of them going directly to the trash.  Perhaps aga should get
> > kickbacks from Qualcomm.  He managed to sell a copy of EudoraPro.)
> It would be nice if each user could install filters on Majordomo itself.
> Not only would we not need to buy Eudora Pro, but we wouldn't have to
> pay to download messages we didn't want to read, and without having
> to employ a moderator (censor).

Bad idea.  It's tough enough on the host running a list with 1500 or
2000 people on it.  Adding outbound filtering for each user would
be a real burden on the list host.  It's better to distribute the
processing by making the user agent (or mail transport that's delivering
to the user) do the filtering.

In addition, a filtering majordomo will only 'protect' the lists that it
serves.  I don't know about you but I get a lot of spam from all sorts
of different sources.  I need to have a filter anyhow.  It's not hard to
add some more rules to filter out each lists's bozos.  It's a lot
simpler to do that than it would be to upload filter rules to each
of the 10 or 12 listservers I get mail from.

There's also a security issue.  How are you going to set it up so
that I can't say hack Tim May's filters to send him nothing but posts
from Phil H-B and Detwiler?  Yea, you can do it with passwords or
PGP or whatever, but it's still more overhead.  Why bother with it
when you don't need to?

Eric Murray  ericm@lne.com  ericm@motorcycle.com  http://www.lne.com/ericm
PGP keyid:E03F65E5 fingerprint:50 B0 A2 4C 7D 86 FC 03  92 E8 AC E6 7E 27 29 AF