OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Massive SPAM Increase

From: gabriel rosenkoetter (greclipsed.net)
Date: Mon Oct 16 2006 - 10:57:47 CDT


On Sat, Oct 14, 2006 at 12:17:51PM -0500, Paul Schmehl wrote:
> It appears that what you're missing is that this one "flaw" is not enough
> to get mail rejected by policyd-weight.

What you're missing is that the assumption that systems sending
valid mail will always (or even will usually) be listed in DNS is
fundamentally wrong and should never be used even as a weighted
guess to indicate spam.

In fact, what's listed in the MX record in DNS is systems where email
should be sent. For any company larger than 50 employees, that's
probably not the same as from where one could reasonably expect
legitimate email.

DNS provides no assertion about the sending of email, and any system
that operates under the assumption that it does is inherently
broken, because it'll get a false positive on better than half of
the valid emails out there. It's a useless heuristic.

--
gabriel rosenkoetter
greclipsed.net

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (FreeBSD)

iD8DBQFFM6v79ehacAz5CRoRAkATAJ9of8pgQYUNf+K8kC2V08i0/lVTywCghUQ3
zNtXRbA9qPImCtLNcdZ3opI=
=UpSy
-----END PGP SIGNATURE-----