On Thu, 2003-01-16 at 08:32, [EMAIL PROTECTED] wrote:
> On 15 Jan 2003, Jeremy Turner wrote:
> 
> > 2.  As discussed previously on this thread (I believe), it might be a
> > bad idea to send an email back to a spam source.  At best, the address
> > doesn't exist, creating a returned bounce email and wasting bandwidth.
> > At worst, the spam source could be a valid user who didn't send the
> > spam.  Sending some sort of return email would not be good.
> 
> I keep hearing this said, but I think this line of thinking overlooks the
> obvious: Bouncing emails tagged by SA isn't to notify the spammers, it's
> to notify the senders of legitimate email that SA sometimes catches.  If
> you're running spamd in an ISP environment, to send those messages to
> /dev/null would be irresponsible, and sending them to a different folder
> would be a support headache, and wouldn't work right for pop3 anyway.

We seem to be getting out of the realm of SpamAssassin, and more into
'What do we do with it next?' but I think it's a relevant discussion in
the world of tackling spam.

The problem or feature of the current system seems to be that you don't
really know who the email is from.  Received: and From: headers can be
faked, so that you really don't know that the listed location is the
true originating location.  You can't reliably bounce an email or notify
a postmaster/abuse account because the email can't be linked back to the
originating location from the email alone.

Jeremy

-- 
**************************************************************
Jeremy Turner, Help Desk Supervisor        Phone: 405.425.5555
Email: [EMAIL PROTECTED]                Phone: 405.425.1820
Information Technology Services, Oklahoma Christian University
**************************************************************

Microsoft Palladium -- Where do you think you're going today???

Linux jturnermac 2.4.19 #10 Mon Oct 14 13:14:58 CDT 2002 ppcunknown GNU/Linux
 08:45:01 up 13 days, 19:01,  2 users,  load average: 5.84, 5.29, 5.26



-------------------------------------------------------
This SF.NET email is sponsored by: Thawte.com
Understand how to protect your customers personal information by implementing
SSL on your Apache Web Server. Click here to get our FREE Thawte Apache 
Guide: http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0029en
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to