Re: Discussion from Clamav list

Marco Paganini wrote:

>  Hi Craig,
>
>  On Fri, Feb 13, 2004 at 09:15:32AM -0700, Craig Daters wrote:
>
> > There is a discussion going on over at the ClamAV users list about
> > ASK (see below), and I was just curious...this discussion prompted
> > me to wonder. What if the majority of forged email address are
> > real. Will innocent users be getting these confirmation requests?
>
>
>  Well, from my experience, most forged email is forged with an invalid
>  sender's address. Sometimes, however, email is indeed forged with a
>  valid return path (has happened to me). In this case, you'll not only
>  receive confirmation requests to messages you did not send, but also:
>
>
>  - Zillions of mail bounces caused by invalid email addresses in the
>  spammer email list.


hi!

    i started (wasn't my intention) the thread in clamav. I like (and 
use) ASK, and i think the same as you about the bounces ratio, but i 
don't get the meaning of this one:

>  The irony of all this is that the ClamAV mailing-list management
>  software

>  would cause the very same problem...

   anyway, one point raised in clamav was quite relevant: spam with 
spamcop-spamtrap accounts forged sender. What would result in inclusion 
in spamcop blacklist. It didn't happen in here, but i think it's just a 
matter of time. So, i was thinking: is it possible to send challenges 
only on certain emails? For instance, only those that are below certain 
SpamAssassin score? I'm using ASK 2.4


    best regards,
    René


-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id56&alloc_id438&op=click