ietf-asrg
[Top] [All Lists]

Re: [Asrg] New proposal for spam blocking: Greylisting

2003-06-20 09:03:30
From: Evan Harris <eharris(_at_)puremagic(_dot_)com>

...
http://projects.puremagic.com/greylisting/ and I have also posted an example
implementation for a Sendmail Milter written in perl.
...

To deal with sharing the database among servers, have you considered
any of the obvious tactics?  I'm thinking of such as NFS (with NFS
clients and servers that do proper locking) or an inter-system protocol
for sharing the triples and their timestamps?

"Dictionary attack" is a more common term for what you call "trolling."

The biggest problem I see with the tactic is "scaling."  It's the same
as the biggest problem with spam, which can be phrased as "What if
everyone does it?"  Contemplate the effects on very large mail servers.

A smaller but still significant problem is that the mechanism addresses
only the current spam problem that involves literal crimes.  The big
corporate spammers run proper SMTP clients that retransmit.  This
tactic will only increase their extremely low per-target costs by a
little bit.

Still, it appears to be a worthy tool.  Running code and technical
details count outmatch any amount of enthusiastic sales talk, bluster,
and arm waving.


Vernon Schryver    vjs(_at_)rhyolite(_dot_)com

_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg