Justin Mason wrote:
The main goals I have to differentiate from typical RBLs are:Rich Puhek said:I'm not sure how useful the RBLs themselves would be to a large group of diverse users, or if it would be most useful if maintained locally.
Once it's closer to ready for primetime, I think I'll sourceforge it, and we'll see how it goes.
Wow -- great idea! Sounds like bl.spamcop.net ;) I would say the RBL would be very useful. --j.
1) Rapid response. Most of the lists are pretty good, but there's a definate lag between the time a spammer sets up shop, and the time they're added to a list. On the other hand, SA can sit and tag thousands of messages from a given spammer in a short period of time. I'd like to hit them during the first few minutes of a spam run. I'm hoping this is a good way to automatically add the spammers to a list with little collateral damage.
2) Differentiated response. By doing temporary rejects (4xx rejects), we can aggressively add hosts to the first level of RBL. Legitimate email will come through eventually, spammers will either get teergrubed, will drop the spam, or will keep hammering away (I might also want to make repeated ignoring of 4xx messages cause for escalation to the "severe" list (5xx response).
3) Opportunity to run a useful RBL locally. This is partially to accomodate #1 above. Will also make it easier to have a whitelist built into your RBL, set your own tolerance to spam, etc. Could help reduce attacks such as the faked spamcop emails of recent months. Could help reduce pollution of the database with legit mail servers (unconfirmed.ordb.org occational suffers from this). Finally, it will best accomodate spam that hits to _your_ site, as opposed to everyone else.
Thanks for the words of encouragement. If I ever get the project ready to see the light of day, I'll let the SA community know.
--
_________________________________________________________
Rich Puhek
ETN Systems Inc.
2125 1st Ave East
Hibbing MN 55746
tel: 218.262.1130
email: [EMAIL PROTECTED]
_________________________________________________________
-------------------------------------------------------
This SF.NET email is sponsored by: Thawte.com
Understand how to protect your customers personal information by implementing
SSL on your Apache Web Server. Click here to get our FREE Thawte Apache Guide: http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0029en
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
