Hi all I don't unterstand, why someone should trust any Blacklist/Spamlist/whatelse and delete some mail, who may probably hit one of thouse lists. _Never_ /dev/null any mail, only weighting them, and if the wieght is much, then move it to a spamfolder on the recipients maildir. [a] I don't unterstand spamhaus, why they don't contact the isp of those domains [b] I don't unterstand admins who trust any lists 100% (I _was_ one of them) [c] I don't unterstand why _Spam_haus take care about phishing (how about Phishinghaus?) nice weekend rog Matthias Hertzog schrieb:

I think that the use of spamhaus got pulled into the default setup for popular spam suites like spamassassin, which many operators running on a shoestring just update onto their systems with out too much critical review every time it comes out. Such behaviour perforce leads to a bump-and-steer philosophy in spam handling. I'd be curious to know if it's still in the latest default setup for these tools. I had a problem with mail sent from a spamhaus.org blocked domain (yahoo.com!) last month. Whitelisted yahoo.com, and that was that. -----Original Message----- From: Roger Buchwalder [mailto:roger@buchwalder.com] Sent: Friday, June 22, 2007 10:32 PM To: swinog(a)swinog.ch Subject: Re: [swinog] spamhaus.org Hi all I don't unterstand, why someone should trust any Blacklist/Spamlist/whatelse and delete some mail, who may probably hit one of thouse lists. _Never_ /dev/null any mail, only weighting them, and if the wieght is much, then move it to a spamfolder on the recipients maildir. [a] I don't unterstand spamhaus, why they don't contact the isp of those domains [b] I don't unterstand admins who trust any lists 100% (I _was_ one of them) [c] I don't unterstand why _Spam_haus take care about phishing (how about Phishinghaus?) nice weekend rog Matthias Hertzog schrieb: _______________________________________________ swinog mailing list swinog(a)lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Hi Tobias, Didn't notice this and currently it is not listed. Do you have any 'evidence' (or references) ;-) (Mailing-list postings, etc) IMO this is your own fault because our MTA is configured incorrectly. When using a RBL, your MTA must only check the RBL if... #1 ..the peer is not allowed to relay based on $trusted_ips #2 ..did also not dare to authenticate itself using SMTP-Auth #3 ..would like send mail to $your_destination Spamming RBLs with queries about internal IPs is not nice. Example for postfix: smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_rbl_client foo.example.com, reject_unauth_destination Regards, Adrian

Zitat von Per Jessen <per.jessen(a)enidan.ch>ch>: Why does this somehow remind me of the discussion around the DNS-Blacklist from KOBIK ... ;-)