Re: Spamcop flagged a number of users from MSN as 'spam' ?

On Sat, 14 May 2005 20:38:15 -0700, "Magoo" <nospammagoo@xxxxxxxxxxx>
wrote:

>Thanks a lot Rich. That's the motive I said "obviously MSN is not in the
>spam list". I mean, given the number of MSN, I doubt the entire domain would
>be have been identified as spam. If I understand correctly, spamcop flags
>the IP addresses of servers.

Yes, but as Rich noted, do not drop mail based simply beause a
mail server is listed. I have personal experience with SPAMCOP listing
the ip address of a large financial insitution I worked for simply
because spoofed email would NDR to one of their servers. A lot of our
clients used SPAMCOP and dropped our messages. Even SPAMCOP themselves
recommend that you do not use their database to drop mail as you will
block legitimate mail and not even know it. I dont how you sold RBLs
to your management, but if you told them that you may drop legitimate
mail and may be dropping it now, I suspect it would not go over so
well.



>"Rich Matheisen [MVP]" <richnews@xxxxxxxxxxxxxxxxxxxxx> wrote in message
>news:rsdd815vchbmh8709c4diso2c6c8vg351t@xxxxxxxxxx
>> "Magoo" <nospammagoo@xxxxxxxxxxx> wrote:
>>
>>>Can you elaborate on this one ? I didn't understand.
>>
>> Sure. The software you use asks the question "is this IP address in a
>> DNS RBL?" If the answer is "yes" then the message is dropped.
>>
>> However, such a binary decision penalizes "good" mail as well as "bad"
>> mail. You may have customers or other legitmate correspondants that
>> use an ISP that had one bad user sending spam for a while. Spamcop, if
>> the IP address was reported, would list the IP address. That means
>> your server won't accept mail from that IP address, no matter who sent
>> it or what it contains.
>>
>> More sophisticated anti-smap software might add, say, 35 points to a
>> message "spam score" if the transmitting IP was listed on SpamCop.
>> But, until the score reached, say, 50 points, no action would be taken
>> against the message.
>>
>> --
>> Rich Matheisen
>> MCSE+I, Exchange MVP
>> MS Exchange FAQ at http://www.swinc.com/resource/exch_faq.htm
>

.

Relevant Pages

  • Re: Spamcop flagged a number of users from MSN as spam ?
    ... >>Thanks a lot Rich. ... >>be have been identified as spam. ... I have personal experience with SPAMCOP listing ... > because spoofed email would NDR to one of their servers. ...
    (microsoft.public.exchange.admin)
  • Re: Spamcop flagged a number of users from MSN as spam ?
    ... I mean, given the number of MSN, I doubt the entire domain would ... >>be have been identified as spam. ... I have personal experience with SPAMCOP listing ... Rich Matheisen ...
    (microsoft.public.exchange.admin)
  • Re: Spamcop flagged a number of users from MSN as spam ?
    ... I have personal experience with SPAMCOP listing ... >>because spoofed email would NDR to one of their servers. ... You can't do effective spam filtering without ... But I suspect that's to deflect the ...
    (microsoft.public.exchange.admin)
  • Re: Spamcop flagged a number of users from MSN as spam ?
    ... Thanks a lot Rich. ... I mean, given the number of MSN, I doubt the entire domain would ... be have been identified as spam. ... If I understand correctly, spamcop flags ...
    (microsoft.public.exchange.admin)
  • Re: MTA on non-standard port
    ... one machine on my LAN is allowed to speak SMTP to the world. ... with his/her laptop, which happens to be infected and sends spam, etc. ... Comcast stirred up the ants. ... servers!), citing "an incident of spam from my IP address". ...
    (freebsd-questions)