-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
- --
Debian Security Advisory DSA 513-1 [EMAIL PROTECTED]
http://www.debian.org/security/ Matt Zimmerman
June 3rd, 2004
On Thu, Jun 03, 2004 at 02:42:59AM +0200, Florian Weimer wrote:
Has [EMAIL PROTECTED] been directed away from debian-private?
Yes.
See #184114 for all the details:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=184114
Steve
--
# The Debian Security Audit Project.
-Oorspronkelijk bericht-
Van: Matt Zimmerman [mailto:[EMAIL PROTECTED] Matt Zimmerman
Verzonden: zondag 30 mei 2004 20:26
Aan: [EMAIL PROTECTED]
Onderwerp: [SECURITY] [DSA 511-1] New ethereal packages fix buffer
overflows
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
-
Hi,
Has anyone else been receiving unusual spam recently which contains no
content?
Is this some spam engine checking MTAs to see if the addresses are
accepted?
Here is an example:
Return-Path: [EMAIL PROTECTED]
X-Original-To: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
Received: from
On Thu, 03 Jun 2004 at 9:42:12 -0500, David Stanaway wrote:
Has anyone else been receiving unusual spam recently which contains no
content?
Yes.
Is this some spam engine checking MTAs to see if the addresses are
accepted?
It also wonders me. Quite possible.
--
Tomasz Papszun SysAdm
hiya david
On Thu, 3 Jun 2004, David Stanaway wrote:
X-Original-To: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
Received: from host-69-145-228-124.client.bresnan.net (unknown
[69.145.228.124]) by david.dialmex.net (Postfix) with SMTP id
CF733146132E
for [EMAIL
Incoming from Alvin Oga:
On Thu, 3 Jun 2004, David Stanaway wrote:
X-Original-To: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
Received: from host-69-145-228-124.client.bresnan.net (unknown
[69.145.228.124]) by david.dialmex.net (Postfix) with SMTP id
CF733146132E
On Thu, 03 Jun 2004 at 12:57:46PM -0400, Alvin Oga wrote:
- email from [EMAIL PROTECTED] should be bounced since
its not coming from bresnan.net
This is a bad suggestion. My ISP requires us (by blocking port 25
outbound) to use their SMTP server. Therefore I cannot connect to the
Incoming from Alvin Oga:
On Thu, 3 Jun 2004, s. keeling wrote:
why is your spam filter allowing 3 basic spam signs thru ??
- email to undisclosed-recipients should be bounced
- email from non-existent hosts should be bounced
host-69-145-228-124.client.bresnan.net
Quoting s. keeling ([EMAIL PROTECTED]):
However, I _would_ like to STOP it from being delivered at all, as
defined by simple rules like those above. As far as I can tell, this
must be done in the SMTP negotiation phase.
Mostly.
What's it going to cost my ISP to implement this? Is it
Quoting Phillip Hofmeister ([EMAIL PROTECTED]):
On Thu, 03 Jun 2004 at 12:57:46PM -0400, Alvin Oga wrote:
- email from [EMAIL PROTECTED] should be bounced since
its not coming from bresnan.net
This is a bad suggestion. My ISP requires us (by blocking port 25
outbound) to use
Incoming from Phillip Hofmeister:
On Thu, 03 Jun 2004 at 12:57:46PM -0400, Alvin Oga wrote:
- email from [EMAIL PROTECTED] should be bounced since
its not coming from bresnan.net
This is a bad suggestion. My ISP requires us (by blocking port 25
outbound) to use their SMTP
On Thu, 3 Jun 2004, s. keeling wrote:
why is your spam filter allowing 3 basic spam signs thru ??
- email to undisclosed-recipients should be bounced
- email from non-existent hosts should be bounced
host-69-145-228-124.client.bresnan.net
- email from [EMAIL
On torsdag 3. juni 2004, 20:24, s. keeling wrote:
This is a bad suggestion. My ISP requires us (by blocking port 25
outbound) to use their SMTP server. Therefore I cannot connect to
the
Considering 60% - 80% of the traffic these days is crap, this is
beginning to look like a fairly
On Wed, 02 Jun 2004 09:02:28 +0300
Damyan Ivanov [EMAIL PROTECTED] wrote:
Remco Seesink wrote:
How could I set it up secure so ibwebadmin is still able to process the database
files?
Leave it running as www-data. Do not add www-data to group firebird.
I guess a user has to enter DB user
hi ya s.
On Thu, 3 Jun 2004, s. keeling wrote:
If I can't, what does my ISP have to do to implement this?
ISP will probably NOT provide spam filtering, becuase of legal issues
My ISP does provide spam filtering; spamassassin marks crap on the
mailhost and procmail moves it to my
On torsdag 3. juni 2004, 20:53, Alvin Oga wrote:
you have to post process your emails
after you already received it.
...and then it is a bit late to bounce, isn't it...?
Cheers,
Kjetil
--
Kjetil Kjernsmo
Astrophysicist/IT Consultant/Skeptic/Ski-orienteer/Orienteer/Mountaineer
[EMAIL
Incoming from Phillip Hofmeister:
On Thu, 03 Jun 2004 at 01:32:55PM -0400, s. keeling wrote:
Assuming my incoming mail is POPped off my ISP's mailhost and my
outgoing mail goes to my ISP's mailhost, how do I implement this?
If I can't, what does my ISP have to do to implement this?
Incoming from Rick Moen:
Quoting s. keeling ([EMAIL PROTECTED]):
However, I _would_ like to STOP it from being delivered at all, as
[snip]
What's it going to cost my ISP to implement this? Is it feasible for
an ISP to implement this?
Is it feasible for them _not_ to? ;-
Yes. The
On Thu, 03 Jun 2004 at 04:10:30PM -0400, s. keeling wrote:
I don't use spamassisin, just bogofilter. Here is my relevant
procmailrc snippet...
Downloading it now, thanks. Hopefully this gets me back to a
maintainable system without all the exception handling, whitelisting,
false
Quoting s. keeling ([EMAIL PROTECTED]):
Yes. The problem with Alvin's solution is it only looks at the crap
that spammers send. A lot of legitimate mail does all the silly
things that spammers do, and users do want to receive that mail.
1. Content-based filtering doesn't work very well (if
On Thu, 3 Jun 2004, Kjetil Kjernsmo wrote:
On torsdag 3. juni 2004, 20:53, Alvin Oga wrote:
you have to post process your emails
after you already received it.
...and then it is a bit late to bounce, isn't it...?
i typically dont need to post process... i never got the spam
post
On Jun 3, 2004, at 3:07 PM, Alvin Oga wrote:
post processing is for the birds in my limited world of 10,000+
mails per day ... most of which are spam
- the original posts spam assassin didnt reject
the incoming spam to undisclosed recepient
- once they validate the email addy is
Quoting David Stanaway ([EMAIL PROTECTED]):
My mail system has a number of users, and I prefer to let the recipient
decide what is spam.
There's a minor problem with this, about which more below.
Some list servers such as yahoogroups (May it rot in pieces) have the
annoying behavior of
Incoming from Rick Moen:
Quoting s. keeling ([EMAIL PROTECTED]):
Yes. The problem with Alvin's solution is it only looks at the crap
that spammers send. A lot of legitimate mail does all the silly
things that spammers do, and users do want to receive that mail.
1. Content-based
Quoting s. keeling ([EMAIL PROTECTED]):
I actually meant the typical worst practices for which spammers are
so well known. Spammers use these things to avoid detection. Average
users do them without even realizing it.
Thanks for clarifying.
Yes, this is an excellent point: Spammers lean
On Thu, Jun 03, 2004 at 03:23:51PM -0700, Rick Moen wrote:
However, if your system is able to determine _during the SMTP session_
that the mail is unwanted (as spam or for some other reason), it can
issue a 55X Reject error and refuse delivery, instead of accepting the
mail and then having to make
Incoming from Phillip Hofmeister:
On Thu, 03 Jun 2004 at 04:10:30PM -0400, s. keeling wrote:
I don't use spamassisin, just bogofilter. Here is my relevant
procmailrc snippet...
Downloading it now, thanks. Hopefully this gets me back to a
maintainable system without all the
Quoting Michael Stone ([EMAIL PROTECTED]):
Yeah, big difference. If the spam is going through a relay, the relay
will send the same bounce and the same person will get the bounce
message.
Oh, oh! jumps up and down
Gee, I guess that relay should have rejected the spam instead of relaying
On Thu, Jun 03, 2004 at 04:34:44PM -0700, Rick Moen wrote:
Quoting Michael Stone ([EMAIL PROTECTED]):
Yeah, big difference. If the spam is going through a relay, the relay
will send the same bounce and the same person will get the bounce
message.
Oh, oh! jumps up and down
Gee, I
On Thu, Jun 03, 2004 at 04:34:44PM -0700, Rick Moen wrote:
Gee, I guess that relay should have rejected the spam instead of relaying
it, right? Then, it wouldn't feel a compulsion to issue a completely
inappropriate bounce [sic] message to a forged sender.
I'm sure the guy who got joe jobbed is
On Thu, 3 Jun 2004, s. keeling wrote:
I actually meant the typical worst practices for which spammers are
so well known. Spammers use these things to avoid detection. Average
maybe we should reject misspelled email subject lines :-)
users do them without even realizing it. For instance,
On Thu, Jun 03, 2004 at 04:24:35PM -0700, Rick Moen wrote:
One can pretend that the matter's open for debate, but that would be a
waste of time: It's happening.
Sure it is. How do you manage to sleep, fixing all the email systems in
the world *and* evangelizing at the same time? Must be tough.
Quoting Michael Stone ([EMAIL PROTECTED]):
I'm sure the guy who got joe jobbed is happy that you can point out the
source of his misforture. Must be real comforting and all.
Was there a particular part of the immediately preceding reference to
SPF that you didn't get, or was it the concept as
Quoting Blu ([EMAIL PROTECTED]):
If my relay server (not open, but relay for customers) has no means to
verify recipients, what to do when the destination server rejects that
mail already accepted by my server?. Bounce.
(Implicit assumption that you have no option but to accept forged-sender
On Thu, Jun 03, 2004 at 05:32:17PM -0700, Rick Moen wrote:
Was there a particular part of the immediately preceding reference to
SPF that you didn't get, or was it the concept as a whole?
I get the concept of vaporware. Seen a lot of it over the years.
Mike Stone
--
To UNSUBSCRIBE, email to [EMAIL
Quoting Michael Stone ([EMAIL PROTECTED]):
On Thu, Jun 03, 2004 at 04:24:35PM -0700, Rick Moen wrote:
One can pretend that the matter's open for debate, but that would be a
waste of time: It's happening.
Sure it is. How do you manage to sleep, fixing all the email systems in
the world
Quoting Michael Stone ([EMAIL PROTECTED]):
On Thu, Jun 03, 2004 at 05:32:17PM -0700, Rick Moen wrote:
Was there a particular part of the immediately preceding reference to
SPF that you didn't get, or was it the concept as a whole?
I get the concept of vaporware. Seen a lot of it over the
In article [EMAIL PROTECTED] you wrote:
Are you suggesting then, that we should not relay mail at all?, not even
to/from our customers?
If you relay mail from your customers, you have to deliver them their
bounces if they spam. If you relay to your customers you better make sure
the backup mx
hi ya blu
On Thu, 3 Jun 2004, Blu wrote:
I agree, but it was suggested that any mail server should reject spam at
SMTP time, and not bounce it at all.
yupp ... best to do at smtp time
If my relay server (not open, but
relay for customers) has no means to verify recipients, what to do when
Incoming from Alvin Oga:
On Thu, 3 Jun 2004, s. keeling wrote:
personal email .. you can proably reject alll html emails
and whitelist all your friends that are sending html emails
... Assuming you can see into the future and can predict where all
your future mail will be coming from.
Incoming from Michael Stone:
It's not misbehaving to generate a bounce message. Glad I could clear
that up.
s/bounce/valid bounce/
You're welcome.
--
Any technology distinguishable from magic is insufficiently advanced.
(*) http://www.spots.ab.ca/~keeling
- -
--
To
While I am sure finding out whose is bigger is exciting to you. I
feel comfortable in speaking for the rest of the list when I say this
thread has become WAY OT. Please mark it as such (in the subject)
or take your discussion elsewhere.
Thanks
On Thu, 03 Jun 2004 at 09:11:57PM -0400, Rick Moen
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Thu, 03 Jun 2004 at 07:26:30PM -0400, s. keeling wrote:
Let me warn you. Bogofilter requires training a database. You may not
Much appreciated. That prompted me to read the man page before I let
it bite me. :-)
NP.
handful of a few
On Thu, Jun 03, 2004 at 02:42:59AM +0200, Florian Weimer wrote:
Has [EMAIL PROTECTED] been directed away from debian-private?
Yes.
See #184114 for all the details:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=184114
Steve
--
# The Debian Security Audit Project.
-Oorspronkelijk bericht-
Van: Matt Zimmerman [mailto:[EMAIL PROTECTED] Matt Zimmerman
Verzonden: zondag 30 mei 2004 20:26
Aan: debian-security-announce@lists.debian.org
Onderwerp: [SECURITY] [DSA 511-1] New ethereal packages fix buffer
overflows
-BEGIN PGP SIGNED MESSAGE-
Hash:
Hi,
Has anyone else been receiving unusual spam recently which contains no
content?
Is this some spam engine checking MTAs to see if the addresses are
accepted?
Here is an example:
Return-Path: [EMAIL PROTECTED]
X-Original-To: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
Received: from
On Thu, 03 Jun 2004 at 9:42:12 -0500, David Stanaway wrote:
Has anyone else been receiving unusual spam recently which contains no
content?
Yes.
Is this some spam engine checking MTAs to see if the addresses are
accepted?
It also wonders me. Quite possible.
--
Tomasz Papszun SysAdm
hiya david
On Thu, 3 Jun 2004, David Stanaway wrote:
X-Original-To: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
Received: from host-69-145-228-124.client.bresnan.net (unknown
[69.145.228.124]) by david.dialmex.net (Postfix) with SMTP id
CF733146132E
for [EMAIL
Incoming from Alvin Oga:
On Thu, 3 Jun 2004, David Stanaway wrote:
X-Original-To: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
Received: from host-69-145-228-124.client.bresnan.net (unknown
[69.145.228.124]) by david.dialmex.net (Postfix) with SMTP id
CF733146132E
On Thu, 03 Jun 2004 at 12:57:46PM -0400, Alvin Oga wrote:
- email from [EMAIL PROTECTED] should be bounced since
its not coming from bresnan.net
This is a bad suggestion. My ISP requires us (by blocking port 25
outbound) to use their SMTP server. Therefore I cannot connect to the
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Thu, 03 Jun 2004 at 01:32:55PM -0400, s. keeling wrote:
Assuming my incoming mail is POPped off my ISP's mailhost and my
outgoing mail goes to my ISP's mailhost, how do I implement this?
If I can't, what does my ISP have to do to implement
Incoming from Alvin Oga:
On Thu, 3 Jun 2004, s. keeling wrote:
why is your spam filter allowing 3 basic spam signs thru ??
- email to undisclosed-recipients should be bounced
- email from non-existent hosts should be bounced
host-69-145-228-124.client.bresnan.net
Quoting s. keeling ([EMAIL PROTECTED]):
However, I _would_ like to STOP it from being delivered at all, as
defined by simple rules like those above. As far as I can tell, this
must be done in the SMTP negotiation phase.
Mostly.
What's it going to cost my ISP to implement this? Is it
Quoting Phillip Hofmeister ([EMAIL PROTECTED]):
On Thu, 03 Jun 2004 at 12:57:46PM -0400, Alvin Oga wrote:
- email from [EMAIL PROTECTED] should be bounced since
its not coming from bresnan.net
This is a bad suggestion. My ISP requires us (by blocking port 25
outbound) to use
Incoming from Phillip Hofmeister:
On Thu, 03 Jun 2004 at 12:57:46PM -0400, Alvin Oga wrote:
- email from [EMAIL PROTECTED] should be bounced since
its not coming from bresnan.net
This is a bad suggestion. My ISP requires us (by blocking port 25
outbound) to use their SMTP
On Thu, 3 Jun 2004, s. keeling wrote:
why is your spam filter allowing 3 basic spam signs thru ??
- email to undisclosed-recipients should be bounced
- email from non-existent hosts should be bounced
host-69-145-228-124.client.bresnan.net
- email from [EMAIL
On torsdag 3. juni 2004, 20:24, s. keeling wrote:
This is a bad suggestion. My ISP requires us (by blocking port 25
outbound) to use their SMTP server. Therefore I cannot connect to
the
Considering 60% - 80% of the traffic these days is crap, this is
beginning to look like a fairly
On Wed, 02 Jun 2004 09:02:28 +0300
Damyan Ivanov [EMAIL PROTECTED] wrote:
Remco Seesink wrote:
How could I set it up secure so ibwebadmin is still able to process the
database
files?
Leave it running as www-data. Do not add www-data to group firebird.
I guess a user has to enter DB
hi ya s.
On Thu, 3 Jun 2004, s. keeling wrote:
If I can't, what does my ISP have to do to implement this?
ISP will probably NOT provide spam filtering, becuase of legal issues
My ISP does provide spam filtering; spamassassin marks crap on the
mailhost and procmail moves it to my
On torsdag 3. juni 2004, 20:53, Alvin Oga wrote:
you have to post process your emails
after you already received it.
...and then it is a bit late to bounce, isn't it...?
Cheers,
Kjetil
--
Kjetil Kjernsmo
Astrophysicist/IT Consultant/Skeptic/Ski-orienteer/Orienteer/Mountaineer
[EMAIL
Incoming from Phillip Hofmeister:
On Thu, 03 Jun 2004 at 01:32:55PM -0400, s. keeling wrote:
Assuming my incoming mail is POPped off my ISP's mailhost and my
outgoing mail goes to my ISP's mailhost, how do I implement this?
If I can't, what does my ISP have to do to implement this?
Incoming from Rick Moen:
Quoting s. keeling ([EMAIL PROTECTED]):
However, I _would_ like to STOP it from being delivered at all, as
[snip]
What's it going to cost my ISP to implement this? Is it feasible for
an ISP to implement this?
Is it feasible for them _not_ to? ;-
Yes. The
On Thu, 03 Jun 2004 at 04:10:30PM -0400, s. keeling wrote:
I don't use spamassisin, just bogofilter. Here is my relevant
procmailrc snippet...
Downloading it now, thanks. Hopefully this gets me back to a
maintainable system without all the exception handling, whitelisting,
false
Quoting s. keeling ([EMAIL PROTECTED]):
Yes. The problem with Alvin's solution is it only looks at the crap
that spammers send. A lot of legitimate mail does all the silly
things that spammers do, and users do want to receive that mail.
1. Content-based filtering doesn't work very well (if
On Thu, 3 Jun 2004, Kjetil Kjernsmo wrote:
On torsdag 3. juni 2004, 20:53, Alvin Oga wrote:
you have to post process your emails
after you already received it.
...and then it is a bit late to bounce, isn't it...?
i typically dont need to post process... i never got the spam
post
On Jun 3, 2004, at 3:07 PM, Alvin Oga wrote:
post processing is for the birds in my limited world of 10,000+
mails per day ... most of which are spam
- the original posts spam assassin didnt reject
the incoming spam to undisclosed recepient
- once they validate the email addy
Quoting David Stanaway ([EMAIL PROTECTED]):
My mail system has a number of users, and I prefer to let the recipient
decide what is spam.
There's a minor problem with this, about which more below.
Some list servers such as yahoogroups (May it rot in pieces) have the
annoying behavior of
Incoming from Rick Moen:
Quoting s. keeling ([EMAIL PROTECTED]):
Yes. The problem with Alvin's solution is it only looks at the crap
that spammers send. A lot of legitimate mail does all the silly
things that spammers do, and users do want to receive that mail.
1. Content-based
Quoting s. keeling ([EMAIL PROTECTED]):
I actually meant the typical worst practices for which spammers are
so well known. Spammers use these things to avoid detection. Average
users do them without even realizing it.
Thanks for clarifying.
Yes, this is an excellent point: Spammers lean
On Thu, Jun 03, 2004 at 03:23:51PM -0700, Rick Moen wrote:
However, if your system is able to determine _during the SMTP session_
that the mail is unwanted (as spam or for some other reason), it can
issue a 55X Reject error and refuse delivery, instead of accepting the
mail and then having to
Incoming from Phillip Hofmeister:
On Thu, 03 Jun 2004 at 04:10:30PM -0400, s. keeling wrote:
I don't use spamassisin, just bogofilter. Here is my relevant
procmailrc snippet...
Downloading it now, thanks. Hopefully this gets me back to a
maintainable system without all the
Quoting Michael Stone ([EMAIL PROTECTED]):
Yeah, big difference. If the spam is going through a relay, the relay
will send the same bounce and the same person will get the bounce
message.
Oh, oh! jumps up and down
Gee, I guess that relay should have rejected the spam instead of relaying
On Thu, Jun 03, 2004 at 04:34:44PM -0700, Rick Moen wrote:
Quoting Michael Stone ([EMAIL PROTECTED]):
Yeah, big difference. If the spam is going through a relay, the relay
will send the same bounce and the same person will get the bounce
message.
Oh, oh! jumps up and down
Gee, I
On Thu, Jun 03, 2004 at 04:34:44PM -0700, Rick Moen wrote:
Gee, I guess that relay should have rejected the spam instead of relaying
it, right? Then, it wouldn't feel a compulsion to issue a completely
inappropriate bounce [sic] message to a forged sender.
I'm sure the guy who got joe jobbed
On Thu, 3 Jun 2004, s. keeling wrote:
I actually meant the typical worst practices for which spammers are
so well known. Spammers use these things to avoid detection. Average
maybe we should reject misspelled email subject lines :-)
users do them without even realizing it. For instance,
On Thu, Jun 03, 2004 at 04:24:35PM -0700, Rick Moen wrote:
One can pretend that the matter's open for debate, but that would be a
waste of time: It's happening.
Sure it is. How do you manage to sleep, fixing all the email systems in
the world *and* evangelizing at the same time? Must be
Quoting Blu ([EMAIL PROTECTED]):
Are you suggesting then, that we should not relay mail at all?, not even
to/from our customers?
I'm quite non-plussed at this question, since it seems to suggest that you
weren't following the thread.
Earlier, I mentioned (to summarise and review) that I take
On Thu, Jun 03, 2004 at 05:16:10PM -0700, Alvin Oga wrote:
On Thu, 3 Jun 2004, Blu wrote:
On Thu, Jun 03, 2004 at 04:34:44PM -0700, Rick Moen wrote:
Do I win a prize,
yup :-)
or was that just a qualifying round, and the real
questions, that actually require thinking, will
Quoting Michael Stone ([EMAIL PROTECTED]):
I'm sure the guy who got joe jobbed is happy that you can point out the
source of his misforture. Must be real comforting and all.
Was there a particular part of the immediately preceding reference to
SPF that you didn't get, or was it the concept as
On Thu, 3 Jun 2004, Blu wrote:
On Thu, Jun 03, 2004 at 04:34:44PM -0700, Rick Moen wrote:
Do I win a prize,
yup :-)
or was that just a qualifying round, and the real
questions, that actually require thinking, will come later?
Are you suggesting then, that we should not relay mail at
Quoting Blu ([EMAIL PROTECTED]):
If my relay server (not open, but relay for customers) has no means to
verify recipients, what to do when the destination server rejects that
mail already accepted by my server?. Bounce.
(Implicit assumption that you have no option but to accept forged-sender
On Thu, Jun 03, 2004 at 05:29:25PM -0700, Rick Moen wrote:
Earlier, I mentioned (to summarise and review) that I take care to have
my MTA reject mail it considers inherently objectionable on various
grounds, as a superior alternative to performing such processing after
acceptance. (Among other
On Thu, Jun 03, 2004 at 05:32:17PM -0700, Rick Moen wrote:
Was there a particular part of the immediately preceding reference to
SPF that you didn't get, or was it the concept as a whole?
I get the concept of vaporware. Seen a lot of it over the years.
Mike Stone
Quoting Michael Stone ([EMAIL PROTECTED]):
On Thu, Jun 03, 2004 at 04:24:35PM -0700, Rick Moen wrote:
One can pretend that the matter's open for debate, but that would be a
waste of time: It's happening.
Sure it is. How do you manage to sleep, fixing all the email systems in
the world
Quoting Michael Stone ([EMAIL PROTECTED]):
The end result is the same in a lot of cases.
I'm sorry, what part of fixing local problems first, and understanding
the scope of one's responsibility are you not quite getting?
The point is that you shouldn't take a holier-than-thou attitude about
Quoting Michael Stone ([EMAIL PROTECTED]):
On Thu, Jun 03, 2004 at 05:32:17PM -0700, Rick Moen wrote:
Was there a particular part of the immediately preceding reference to
SPF that you didn't get, or was it the concept as a whole?
I get the concept of vaporware. Seen a lot of it over the
In article [EMAIL PROTECTED] you wrote:
Are you suggesting then, that we should not relay mail at all?, not even
to/from our customers?
If you relay mail from your customers, you have to deliver them their
bounces if they spam. If you relay to your customers you better make sure
the backup mx
hi ya blu
On Thu, 3 Jun 2004, Blu wrote:
I agree, but it was suggested that any mail server should reject spam at
SMTP time, and not bounce it at all.
yupp ... best to do at smtp time
If my relay server (not open, but
relay for customers) has no means to verify recipients, what to do when
Incoming from Alvin Oga:
On Thu, 3 Jun 2004, s. keeling wrote:
personal email .. you can proably reject alll html emails
and whitelist all your friends that are sending html emails
... Assuming you can see into the future and can predict where all
your future mail will be coming from.
Incoming from Michael Stone:
It's not misbehaving to generate a bounce message. Glad I could clear
that up.
s/bounce/valid bounce/
You're welcome.
--
Any technology distinguishable from magic is insufficiently advanced.
(*) http://www.spots.ab.ca/~keeling
- -
Incoming from Bernd Eckenfels:
In article [EMAIL PROTECTED] you wrote:
Are you suggesting then, that we should not relay mail at all?, not even
to/from our customers?
If you relay mail from your customers, you have to deliver them their
bounces if they spam. If you relay to your
On May 27, 2004, at 2:15 PM, Kevin B. McCarty wrote:
On 5/27/2004, Luk Claes wrote:
You should check the website www.d-o/security/nonvulns-woody
At least 4 of the 5 you mention are listed there...
Luk -- thank you! Somehow I had no idea that web page existed...
Nor did I. It's very good
While I am sure finding out whose is bigger is exciting to you. I
feel comfortable in speaking for the rest of the list when I say this
thread has become WAY OT. Please mark it as such (in the subject)
or take your discussion elsewhere.
Thanks
On Thu, 03 Jun 2004 at 09:11:57PM -0400, Rick Moen
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Thu, 03 Jun 2004 at 07:26:30PM -0400, s. keeling wrote:
Let me warn you. Bogofilter requires training a database. You may not
Much appreciated. That prompted me to read the man page before I let
it bite me. :-)
NP.
handful of a few
95 matches
Mail list logo
