Messages in this thread | | | From | "jdow" <> | Subject | Re: VGER does gradual SPF activation (FAQ matter) | Date | Mon, 12 Jun 2006 11:46:53 -0700 |
| |
From: "Krzysztof Halasa" <khc@pm.waw.pl>
> Gerhard Mack <gmack@innerfire.net> writes: > >> Look at it from a mail admin's perspective. The bounces are now going >> nowhere instead of some poor user's mailbox. You have just cut the damage >> in half. > > If people doing SPF configured their servers to reject obviously > bad messages before the SMTP transaction is completed (rather than > generating a bounce later) it would IMHO do much more good.
Krzysztof, the point here is that experience with active spam filtering indicates that there is no such thing as "obviously bad messages" that will not catch some good messages in its broad brush. It will also let some not quite so obvious bad messages through. SPF has ONE "fail" mode which is relatively good. Aside from that it is as close to worthless for filtering spam as anything else. It's a hint and nothing more.
SPF as a part of a fully configured anti-spam system has some use. SPF used ALONE is as bad as SORBS used alone. You will suffer a false alarm rate sufficient that most people would consider it quite unacceptable.
Filtering on the basis of SPF records is not a technique that would prove acceptable or practical for LKML. Nor will it materially stop spam from determined spammers. The SPF record vouches for the email. Who vouches for the SPF record?
Besides, I rather suspect everybody on this list is in a position to and capable of setting up a decent spam filter for themselves. I'm certainly not at the level of expertise of many or most of the people active on this list. Yet I have a spam filter setup that has not let a single spam leak through on this list in the last month. Nor has it misfired once in the last month. I am not particularly aggressive maintaining my rule sets. I don't touch them unless something new annoys me or a spam escapes detection. About two months ago the LKML and other similar open list spam leakage finally "reached me." I looked at prior attempts to filter LKML. Noted what worked and what didn't. And I ended up hitting a simple strategy. (Unfortunately it is awkward with SpamAssassin. But it works.) I basically make the low Bayes scores score even lower or even negative for these "problem lists". I make the high Bayes scores score even higher for these "problem lists". After that and with my prior Bayes training spam from this list and others like it has simply gone away.
I used my head for something other than a hat rack for 15 minutes to solve the problem the right way. I found a suitable wrench to repair the email plumbing rather than beating it with a hammer or prying at it with a screwdriver. SPF seems to be at best a MUNGED hex key.
{^_^} Joanne - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |