Re: anti-SPAM solutions

2009-06-20 Thread Robert Tomanek
Hello Privateofcourse,

Monday, June 15, 2009, 4:22:48 PM, you wrote:
  I've done a bit of leg work, but it seems to me that the majority of
  so-called 'SPAM blocker/stopper' solutions don't and can't really do
  anything other than allow you to manage SPAM after-the-fact. That is, SPAM
  isn't actually blocked or stopped at all, but is managed after it has been
  received.

 Well, yes, that's exactly what you have to expect *if* you want to
 deal with spam on the MUA (i.e. TB!) level. You can't really expect
 your email program (which typically is completely separate from your
 mail server) to decide which emails need to be accepted and which
 need to be rejected.

  But nonetheless, I suspect that for some this is better than
  nothing at all.

 Agree.

 As for me, I used to use AntispamSniper for some time (and BayesIt!
 before that). The main drawbacks were:
 - severe limitations on using encrypted connections to the server,
 - me wanting to access an acount from more than one PC -- this did
not fit nicely with the idea of client-side filtering,
 - me deciding TB! was too unreliable and switching to IMAP account.


 For reference: my current setup is a mail server (Postfix + Dovecot)
 which has SpamAssassin process incoming emails. SA only flags these
 emails (adds rating information to header). Then, a Sieve script run
 by Dovecot does the actual actions: suspected spam is moved to Junk
 folder; if it's obvious spam it is additionally marked as Read.

 So, as for checking for false positives: from time to time I can
 review all messages that have been marked as spam, and, on a daily
 basis, I see the ones that were not marked as Read (i.e. not
 obvious).

 The lessons learned here are:
 - this works independently of the MUAs I use to access my email base
(I use more than just TB!),
 - SA is far more thorough than any client plugins (it offers more
checks, the rules are updated often, etc.),
 - this is a part of a bigger filtering scheme; the filtering happens
on server side and I am not forced to rely on TB!'s extremely
unreliable filtering; the individual email automatically get
dispatched into proper folders.
 - I *could* implement a true spam rejection scheme by enabling e.g.
greylisting in Postfix but the current setup works so well that I
don't feel the need to do so.

 One wish I have would be for TB! to allow assigning Junk folder to a
 server folder -- please support my wish here:
 https://www.ritlabs.com/bt/view.php?id=6483

 So much for the description of my setup. It probably won't help you
 or your friends/ family but should allow you to set the expectations.

 You always can:
 - use an email provider that has reasonable filtering (e.g. GMail),
 - try to use something like AntispamSniper to filter spam.

 Also, I think that trying to write your own set of rules for TB!'s
 filter mechanism is bound to fail. This might allow you to filter out
 a significant part of spam volume but in practice, if you get 100
 spam messages per day instead of 300, does it really help you?


-- 
Best regards,
 Robert Tomanekmailto:tb...@mail.robert.tomanek.org



Current version is 4.2.6 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: anti-SPAM solutions

2009-06-20 Thread MFPA
Hi

On Friday 19 June 2009 at 10:43:13 AM, in
mid:010606166.20090619104...@privateofcourse.co.uk, Privateofcourse
wrote:



 Thanks for the detailed info. Interesting method. I
 personally use the old way of creating company /
 contact specific email aliases: everyone has their own
 contact email address IOW. Of course this means
 creating forwarders for every new contact, but then you
 can identify immediately where SPAM has come from...and
 inform whoever it is that has leaked the email address
 that they've got a problem. I also then delete the
 forwarder for them and give them a new, 'clean'
 alias/contact email address.

 For this purpose I use a separate domain name to my
 personal (friends and family only IOW) one, and of
 course there is a default address that I give out if I
 can't set up a new forwarder for someone/a contact
 there and then. When I'm next at my PC I'll set up a
 new forwarder for whoever it is and send them an email
 asking them to update their contact details.

I use catch-all forwarding rather than setting up lots of forwarders
and make use of filters in TB! to dump mail addressed to any
unrecognised alias into an other incoming folder. Not as rigorous as
your system but it means I can invent contact email addresses on the
fly if I want and set up filters for them later.



 I also create a monthly temp alias with a 8 digit code.
 Eg.

 temp.yu854...@domain.co.uk

 and use this for all other contact forms and such like.
 Every month I simply delete the alias and create a new
 one, excluding the temp address, this particular setup
 is near as dammit 100% SPAM free.

I used to do this six-monthly but now change it annually, unless SPAM
catches up with it. It rarely gets more than 3 or 4 SPAM messages a
day. I also use a separate yahoo addresss for this and two other
mailing lists, which I change annually or thereabouts.

For signing up on websites I tend to use disposible address services -
pookmail.com and dodgmail.com seem to be defunct now but
getonemail.com still worked recently.

 My personal email does get occasional SPAM, and I keep
 having to update the filters in cPanel. But I've just
 been reading about the free Comodo AntiSpam software,
 which is a free challenge and response system. This
 'looks' promising, and may be the solution I've been
 looking for my personal communications.

Some people seem to like those challenge/response things. I never
reply to them as they look like some sort of attempt to harvest valid
email addresses. Even if genuine, anybody who makes it that awkward to
contact them must be pretty special for me to bother with them  (-;


-- 
Best regards,
 
MFPA

A bird in the hand makes it awfully hard to blow your nose

Using The Bat! v4.0.38 on Windows XP 5.1 Build 2600  



Current version is 4.2.6 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html