On Feb 13, 2015, at 5:42 PM, Benny Pedersen <m...@junc.eu> wrote:
> 
> problem with lists is that a spammer just create a new free domain and spam 
> with it, so be in front, list all as spam until it known not to be

In this specific case,the list is a list of known domains that will pass 
whitelist_auth, which means you can blacklist them and when they pass auth, 
they magically get through.

As Dave Pooser posted:
> whitelist_auth *@bankofamerica.com
> blacklist_from *@bankofamerica.com
> 
> I score blacklist_from at 80 points so an address that's both blacklisted and 
> whitelisted will be effectively whitelisted, thanks to a net -20 score

When BOA sends an email, it hits the blacklist and gets a score of +80, but if 
the mail passes whitelist_auth (meaning it’s really from BOA), then it gets a 
-100. So anyone who is not BOA ends up with a score of +80. It doesn’t matter 
how many random domains they create.

A list really would be helpful in this case.

-- 
'I don't like to ask them questions.' 'Why not?' 'They might give me
answers. And then what would I do?'

Reply via email to