<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>An It-Slave in the digital saltmine &#187; spam</title>
	<atom:link href="http://www.it-slav.net/blogs/category/spam/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.it-slav.net/blogs</link>
	<description>Another Blog from a Geek that has no life</description>
	<lastBuildDate>Fri, 02 Jul 2010 07:33:08 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Spamfighting</title>
		<link>http://www.it-slav.net/blogs/2008/11/02/spamfighting/</link>
		<comments>http://www.it-slav.net/blogs/2008/11/02/spamfighting/#comments</comments>
		<pubDate>Sun, 02 Nov 2008 09:38:50 +0000</pubDate>
		<dc:creator>peter</dc:creator>
				<category><![CDATA[Geek stuff]]></category>
		<category><![CDATA[OpenBSD]]></category>
		<category><![CDATA[graph]]></category>
		<category><![CDATA[spam]]></category>
		<category><![CDATA[sysadmin]]></category>

		<guid isPermaLink="false">http://www.it-slav.net/blogs/?p=70</guid>
		<description><![CDATA[I do not like spam.
This a problem that grows and there are many technologies how to fight it.
As I&#8217;m the sysadmin of my mailserver it makes it possible to use many approaches. The best way is to find out if it is a spam before it is accepted at the SMTP server. I&#8217;m using a [...]]]></description>
			<content:encoded><![CDATA[<p><strong>I do not like spam.</strong></p>
<p>This a problem that grows and there are many technologies how to fight it.</p>
<p>As I&#8217;m the sysadmin of my mailserver it makes it possible to use many approaches. The best way is to find out if it is a spam before it is accepted at the SMTP server. I&#8217;m using a<a href="http://flakshack.com/anti-spam/wiki/index.php?page=FairlySecureAntiSpamWiki" target="_blank"> Fairly-Secure Anti-SPAM Gateway Using OpenBSD, Postfix, Greylisting, Amavisd-new, SpamAssassin, Razor and DCC</a> and it is very effective.</p>
<ul>
<li>The first filter is to check if the receiver of the mail is valid. It might seem like a obvious first filter but in many cases the host that receives mails from internet only forward the mail to an inner mail server and suddenly invalid mails with probably incorrect <strong>from</strong> address is the receiving organizations problem. With this approach a valid mail but misspelled <strong>to</strong> address will bounce back to the sender. If it is a spam mail it will be the sending hosts problem how to handle. I graph this and it can be found <a title="Graph Rejected mails it-slav.net" href="http://www.it-slav.net/~spamreport/mailrejected-year.png" target="_blank">here</a>. A qualified guess is that more or less all of them are spams.</li>
<li>The second step is a little bit more complex, the mail is scanned before it is accepted. So if my spam scanner finds that the mail is a spam it will tell the sending mailserver that it-slav.net thinks that this mail is a spam and that it is not accepted. If nothing suspicious is found the mailserver accept the mail  and it will be sent to my mailserver. The number of mails that are scanned and a spam is found is graphed and it can be found <a title="Graph spam mails It-Slav.Net" href="http://www.it-slav.net/~spamreport/mailspam-year.png" target="_blank">here</a>.</li>
<li>A third technology I have used is <a href="http://en.wikipedia.org/wiki/Greylisting" target="_blank">greylistening</a>, it is very effective but the technologies described above is good enough for me so I&#8217;m not using it now. It puts a little more burden on the sending host and the first time a host sends a mail to a new host it will take some extra time.</li>
<li>A promising technlogy is <a title="SPF homepage" href="http://www.openspf.org/" target="_blank">SPF</a>, the idea is to guarantee that the sending mail comes from the place were it claims to come from, a good <a href="http://en.wikipedia.org/wiki/Sender_Policy_Framework" target="_blank">description</a> can be found at <a href="http://www.wikipedia.org/" target="_blank">wikipedia</a>. Spamassassin use SPF. If you want to avoid that your domain can be used as the sender of a spam, add some extra lines to your DNS record.</li>
<li>To annoy spamsenders a good idea could be to start a <a title="tarpit" href="http://en.wikipedia.org/wiki/Tarpit_(networking)" target="_blank">tarpit</a>. Send all spammsenders to your tarpitt and enjoy when they use their resources for nothing. It is i<a title="spamd" href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&amp;apropos=0&amp;sektion=0&amp;manpath=OpenBSD+Current&amp;arch=i386&amp;format=html" target="_blank">ncluded</a> in <a href="http://www.openbsd.org">OpenBSD</a> in compination with greylistening.</li>
</ul>
<p>Graphs</p>
<ul>
<li><a href="http://www.it-slav.net/~spamreport/mailrejected-year.png" target="_blank">Rejected</a><a href="http://www.it-slav.net/~spamreport/mailrejected-year.png" target="_blank"><br />
</a></li>
<li><a href="http://www.it-slav.net/~spamreport/mailspam-year.png" target="_blank">Spam</a></li>
</ul>
]]></content:encoded>
			<wfw:commentRss>http://www.it-slav.net/blogs/2008/11/02/spamfighting/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
