Makes sense. Gary Smith
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Saturday, December 20, 2003 12:45 PM To: Gary Smith Cc: [EMAIL PROTECTED] Subject: Re: We have big evil now we need big good... On Sat, 20 Dec 2003 09:52:00 -0800, "Gary Smith" <[EMAIL PROTECTED]> writes: > So we implemented SA some time ago because our clients were getting > too much spam. Lately we have found that several html marked up > emails have been getting marked as spam. These ones are clearly > fp's. > > Some of the domains include Morningstar.com, charlesswab.com and > several other financial institutions. Some of the clients get their > weekly reportings sent to them, and it has of course the "remove me" > tag at the bottom as well as a bunch of html so it gets marked as > spam. > > I know I could just create a simple white list but it might be more > useful to create a project of good companies to fix the fp's. > > Looking for feedback on the topic > Such a 'well known whitelist' give spammers a list of domains to forge. So, such a program would also have to identify the actual mail server IP addresses for each whitelisted domain to verify that an email purporting to come from that domain actually did come from the correct IP. This isn't scalable, the project would have to update the whitelist each time any listed domain changed email providers. With one of the RMX proposals (where a domain can dns encode a list of smtp servers authorized to send email from the domain), it then is probably feasible. Scott ------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id78&alloc_id371&op=click _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk