Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations IamaSherpa on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Vigilante anti-spam tactics

Status
Not open for further replies.

Schroeder

MIS
Sep 25, 2001
382
US
We're beginning to have problems with email being bounced by anti-spam software. An issue that only came to my attention a week or two ago has quickly become a real problem. Private individuals are compiling lists of servers and ISPs who they believe allow spam to circulate through their networks. They've made these lists available to the public and various anti-spam programs have begun using them to filter messages.

When the managers of the lists think they've detected spam activity on a particular server or network, they add the network's entire range of addresses to their blacklists. The result is that, by the time a legitimate message has traversed the internet, its odds of avoiding all blacklisted networks have become slim to none. One of the blacklists I checked listed UUNET!

Even though our organization hasn't sent a single piece of marketing email, spam or otherwise, we're receiving an increasing number of bounces due to these blacklists. I can only guess that our customers assume we're ignoring their emails.

Clearly, the blacklisters goal is not so much to block spam as it is to pressure network administrators to be more active in the fight against it. They're counting on both recipients and senders of legitimate mail to complain to their ISPs, hopefully convincing them to take the necessary steps to eliminate spam from their networks. While a noble goal, I believe the means of achieving it do more harm than good.

The blacklists are invariably maintained by tech-heads that see their work as a righteous, hard-line approach to combating spam. The sites I've seen inform visitors that the lists are maintained for the administrator's personal use in blocking unwanted mail from their networks. That's fine. They know what they're doing and understand the ramifications. The problem is, their lists are being used by software targeted towards less savvy users who may not be fully aware of what's happening.

The blacklisters wash their hands of responsiblity for the use of their lists by maintaining a position of passive involvement. They're not the ones blocking email, they just provide a list. What other people do with that list is not their business. I also get the distinct impression of disregard for the effects their lists have on ordinary users. They seem to feel that the internet exists for their use and that "newbies" that don't understand concepts like subnets and mail servers have no business there in the first place.

Well, if you've indulged my rant to this point... I'd like to hear some other views on the subject.
 
They're blocking UUNet's full IP range? Wow. Anyway, I lean toward the blacklisters' side in this. If the antispam software companies are simply pulling blacklists from wherever they find them, their software is destined to be overly restrictive. The software companies' developers are also familiar with subnets and mail servers and they should be properly supporting the purchasers of their products.
-Steve
 
Realtime Blackhole Lists, or RBL's have been around for a while. I have not heard of them being a problem. If people are accepting "anybody's" list as valid, then there might be a problem. There are a few lists that I think are accepted as "semi-official", and any others are just personal lists.

The one time I did run into a RBL, was when the admin of a mailing list sent me a notice that the mail server I was using was on a RBL. They requested that I should forward the admin of the server a message so that they could close down the openings that were allowing spammers to send spam mail through their server, and get off the list.

Like you said, one of the reasons to have the list is to pressure network admins into doing something about their users who are ( usually ) violating their EUA's by sending spam. Sort of like a landlord that has a obnoxious tenant...

Like anybody else, I hate spam. Short of configuring my mail program to automatically reject any mail that does not have a particular ID string in the subject line, and telling everyone that mails me to put that string in the subject or their mail won't get through, there's really no way to be rid of it.

Robert
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top