Re: [mailop] how does mailhash.josephlist.net work?

2024-04-04 Thread Benoit Panizzon via mailop
> Yes, there are joe jobs.  No, there are not very many.

Yes, everyone can send emails containing targeted URI to known
spamtraps, which then will extract and feed those URI to URI Blacklists.

So I guess this works on in similar way, just for email addresses found
in emails.

Joe-Jobs are an issue, thankfully not too much of an issue.

Mit freundlichen Grüssen

-Benoît Panizzon-
-- 
I m p r o W a r e   A G-Leiter Commerce Kunden
__

Zurlindenstrasse 29 Tel  +41 61 826 93 00
CH-4133 PrattelnFax  +41 61 826 93 01
Schweiz Web  http://www.imp.ch
__
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] how does mailhash.josephlist.net work?

2024-04-02 Thread Atro Tossavainen via mailop
> What I found out is that the email content is searched for email
> addresses and if some hash of that email address matches, the email is
> rejected. It's the full email address. Only the domain part does not
> trigger the issue.

Yeah. To my knowledge, the idea of hash blocklists was first publicly
proposed in M3AAWG 41, October 2017.

https://msbl.org/ebl.html has the details.

Ever since, Spamhaus HBL has come up (to address not only email addresses
but also files and cryptocurrency wallets) and it seems that even more
people have taken up the mantle now.

-- 
Atro Tossavainen, Founder, Partner
Koli-Lõks OÜ (reg. no. 12815457, VAT ID EE101811635)
Tallinn, Estonia
tel. +372-5883-4269, https://www.koliloks.eu/
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] how does mailhash.josephlist.net work?

2024-04-02 Thread John Levine via mailop
It appears that Peter N. M. Hansteen via mailop  said:
>On Tue, Apr 02, 2024 at 04:09:48PM +0200, Benoit Panizzon via mailop wrote:
>> I came across emails rejected by mailhash.josephlist.net
>> 
>> reason: 550 5.7.1 block listed email address s...@example.com by 
>> mailhash.josephlist.net (c559b92e0e284312b26c88d4bb707d14)
>
>"block listed email address"? 
>
>This sounds like somebody who never heard about joejobs, but who am I to judge?

I get a great deal of spam that says to respond to a dropbox somewhere
else. If they're looking for those dropboxes, that makes some sense.

Yes, there are joe jobs.  No, there are not very many.

R's,
John
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] how does mailhash.josephlist.net work?

2024-04-02 Thread Peter N. M. Hansteen via mailop
On Tue, Apr 02, 2024 at 04:09:48PM +0200, Benoit Panizzon via mailop wrote:
> I came across emails rejected by mailhash.josephlist.net
> 
> reason: 550 5.7.1 block listed email address s...@example.com by 
> mailhash.josephlist.net (c559b92e0e284312b26c88d4bb707d14)

"block listed email address"? 

This sounds like somebody who never heard about joejobs, but who am I to judge?

- P


-- 
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
https://bsdly.blogspot.com/ https://www.bsdly.net/ https://www.nuug.no/
"Remember to set the evil bit on all malicious network traffic"
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


[mailop] how does mailhash.josephlist.net work?

2024-04-02 Thread Benoit Panizzon via mailop
Hi List

I came across emails rejected by mailhash.josephlist.net

reason: 550 5.7.1 block listed email address s...@example.com by 
mailhash.josephlist.net (c559b92e0e284312b26c88d4bb707d14)

What I found out is that the email content is searched for email
addresses and if some hash of that email address matches, the email is
rejected. It's the full email address. Only the domain part does not
trigger the issue.

The hash at the end of the error message looks like an MD5 hash. But
that hash does not match (tested lower and upper case) the email
address listed.

Also, if I send two email containing the email address triggering the
block, I get two different hashes. So maybe the hash is not derived
from the email address?

Does anyone know how mailhash.josephlist.net operates and the reason
why they list hashes of email addresses found in email bodies?

Mit freundlichen Grüssen

-Benoît Panizzon-
-- 
I m p r o W a r e   A G-Leiter Commerce Kunden
__

Zurlindenstrasse 29 Tel  +41 61 826 93 00
CH-4133 PrattelnFax  +41 61 826 93 01
Schweiz Web  http://www.imp.ch
__
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop