Makes sense.

Gary Smith

 -----Original Message-----
From:   [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
Sent:   Saturday, December 20, 2003 12:45 PM
To:     Gary Smith
Cc:     [EMAIL PROTECTED]
Subject:        Re: We have big evil now we need big good...

On Sat, 20 Dec 2003 09:52:00 -0800, "Gary Smith" <[EMAIL PROTECTED]> writes:

> So we implemented SA some time ago because our clients were getting
> too much spam.  Lately we have found that several html marked up
> emails have been getting marked as spam.  These ones are clearly
> fp's.
> 
> Some of the domains include Morningstar.com, charlesswab.com and
> several other financial institutions.  Some of the clients get their
> weekly reportings sent to them, and it has of course the "remove me"
> tag at the bottom as well as a bunch of html so it gets marked as
> spam.
> 
> I know I could just create a simple white list but it might be more
> useful to create a project of good companies to fix the fp's.
> 
> Looking for feedback on the topic
> 

Such a 'well known whitelist' give spammers a list of domains to forge.

So, such a program would also have to identify the actual mail server
IP addresses for each whitelisted domain to verify that an email
purporting to come from that domain actually did come from the correct
IP. This isn't scalable, the project would have to update the
whitelist each time any listed domain changed email providers.

With one of the RMX proposals (where a domain can dns encode a list of
smtp servers authorized to send email from the domain), it then is
probably feasible.



Scott




-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id78&alloc_id371&op=click
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to