Commentary: spamcop filters only blocked a tiny amount of mail,
overall. 233 messages in 24 hours. Of those, ~80% were obviously false
positives, and the remainder are listed below, some of which may be
false positives as well but I'd guess a lot are spam. Techtarget
looks like a one-to-many list, and I have no problem with those
taking a collatoral damage hit. No idea what seagull.net is.

Incoming spam to mail-archive mainly clutters up the "archive@jab.org"
slushbox (useful for lists requiring a confirmation) and pollutes the
list-of-lists; otherwise no real harm done. Still, even though the
numbers sound pretty horrific (80% false positives), they may actually
make sense after I think about it enough.  (Basically it would mean
tough luck to a relatively small number of high traffic lists.)
Another idea, when I move up to Exim 3.2+ with the next Debian
release, may be to apply a rule like this one from SourceForge:

# Even better: refuse senders that do not exist (by asking the remote mail
# server). This adds a little load, but it's awesome -- Marc
#
#sender_verify_hosts_callback =  
!127.0.0.1:!10.0.0.0/8:!*.sourceforge.net:/etc/mail/checksender/badsendinghosts:*
#sender_verify_callback_domains = 
!sourceforge.net:!users.sourceforge.net:/etc/mail/checksender/baddomains:*

Anyway, these are the numbers, and for the moment I'll lay off the
spamcop filter. I am happy to hear feedback on whether that should be
permanent. By the way, if you were affected, you may want to figure
out how to get off the blacklist regardless of mail-archive.

Cheers,
Jeff

PS. Of course, the big fight from M-A's perspective is always against
the harvestor.

PSS. My personal incoming spam was hardly effected (sigh...) as
much of it now comes from @jab.org and @alum.mit.edu forwarding
addresses.

====

$ grep spamcop rejectlog rejectlog.0 | wc -l
233

$ grep spamcop rejectlog rejectlog.0 | grep -v -e columbia.edu \
-e mozilla.org -e berkeley.edu -e listserver.kbx.de  | wc -l
38


$ grep spamcop rejectlog rejectlog.0 | grep -v -e columbia.edu \
-e mozilla.org -e berkeley.edu -e listserver.kbx.de | cut -f2- -dm | sort
 217-125-36-14.uc.nombres.ttd.es [217.125.36.14] (RBL bl.spamcop.net)
 [195.134.128.227] (RBL bl.spamcop.net)
 [195.134.128.227] (RBL bl.spamcop.net)
 [200.14.206.2] (RBL bl.spamcop.net)
 [202.101.110.226] (RBL bl.spamcop.net)
 [202.108.68.140] (RBL bl.spamcop.net)
 [206.52.249.63] (RBL bl.spamcop.net)
 [208.146.216.228] (RBL bl.spamcop.net)
 [218.6.2.37] (RBL bl.spamcop.net)
 [63.228.131.162] (RBL bl.spamcop.net)
 [63.240.200.7] (RBL bl.spamcop.net)
 [80.33.147.27] (RBL bl.spamcop.net)
 adsl-64-172-2-185.dsl.sntc01.pacbell.net [64.172.2.185] (RBL bl.spamcop.net)
 dewey.techtarget.com [65.214.43.156] (RBL bl.spamcop.net)
 dewey.techtarget.com [65.214.43.156] (RBL bl.spamcop.net)
 dewey.techtarget.com [65.214.43.156] (RBL bl.spamcop.net)
 dewey.techtarget.com [65.214.43.156] (RBL bl.spamcop.net)
 dewey.techtarget.com [65.214.43.156] (RBL bl.spamcop.net)
 dewey.techtarget.com [65.214.43.156] (RBL bl.spamcop.net)
 host2.btamail.net.cn [202.106.196.72] (RBL bl.spamcop.net)
 leisure.seagull.net [209.102.23.129] (RBL bl.spamcop.net)
 leisure.seagull.net [209.102.23.129] (RBL bl.spamcop.net)
 leisure.seagull.net [209.102.23.129] (RBL bl.spamcop.net)
 leisure.seagull.net [209.102.23.129] (RBL bl.spamcop.net)
 leisure.seagull.net [209.102.23.129] (RBL bl.spamcop.net)
 leisure.seagull.net [209.102.23.129] (RBL bl.spamcop.net)
 leisure.seagull.net [209.102.23.129] (RBL bl.spamcop.net)
 leisure.seagull.net [209.102.23.129] (RBL bl.spamcop.net)
 leisure.seagull.net [209.102.23.129] (RBL bl.spamcop.net)
 leisure.seagull.net [209.102.23.129] (RBL bl.spamcop.net)
 leisure.seagull.net [209.102.23.129] (RBL bl.spamcop.net)
 leisure.seagull.net [209.102.23.129] (RBL bl.spamcop.net)
 leisure.seagull.net [209.102.23.129] (RBL bl.spamcop.net)
 leisure.seagull.net [209.102.23.129] (RBL bl.spamcop.net)
 leisure.seagull.net [209.102.23.129] (RBL bl.spamcop.net)
 out-mta3.plasa.com [202.134.0.195] (RBL bl.spamcop.net)
 uuout3smtp8.uu.flonetwork.com [209.167.79.38] (RBL bl.spamcop.net)
 uuout3smtp8.uu.flonetwork.com [209.167.79.38] (RBL bl.spamcop.net)


_______________________________________________
Gossip mailing list
[EMAIL PROTECTED]
http://jab.org/cgi-bin/mailman/listinfo/gossip

Reply via email to