[Mailman-Developers] Google Summer of Code - Spam Defense

[Timo Wingender]

Jason Pruim schrieb:
>
> On Mar 27, 2008, at 12:29 PM, Jo Rhett wrote:
>> Timo Wingender wrote:
>>> Discard messages from nonmembers is no option on most lists.
>>
>> AFAIK it is an option, but not the default and defaults are rarely
>> changed in my experience.
>>
>>> The first action is to integrate support for SpamAssassin in
>>> Mailman. Therefor I wrote a python class spamc which connects to spamd.
>>> This gives the possibility to scan all incoming Mail.
>>
>> Entirely my opinion, but I suspect that this will be harder to do and
>> less portable than having a mailman front-end that recognizes the
>> headers inserted by the major spam gateways.
>>
>> For example, the sites I am aware of run amavisd+SA in front of mailman.
>>  They aren't going to disable amavis to have mailman run SA directly.
>> Nor are sites with barrucudas likely to do so, etc etc.  My opinion
>> entirely, but I think it would be better to make mailman aware of the
>> headers inserted by these solutions.
>>
>
> One thing that I've been thinking about in regards to this... Is this 
> job the responsibility of mailman? To scan for spam and other such 
> things?
Of course this is not the primary job of mailman. But it can help to 
reduce the effort to moderate lists.

If you have an moderator for each list it's no problem if a few spam 
messages per day are hold. But if you don't it's much effort to sort out 
all the spam.
>
> I do all of my scanning at the front end, all e-mail gets run through 
> ASSP to scan blacklists, grey list, etc. etc. then it goes to the MTA, 
> which in my case just verifies the account exists (Or an alias for it 
> does) and then is delivered to mailman for delivery...
Not every site runs ASSP and I am not a fan of greylisting. It delays 
mails of legitimate users and once most sites use is spammers will get 
around it.
>
> Why not run something like that instead of checking for all that stuff 
> just before the delivery?
>   
>
>> Again, just my opinion.
>>
>> -- 
>> Jo Rhett
>> Net Consonance ... net philanthropy, open source and other randomness
>> _______________________________________________
>> Mailman-Developers mailing list
>> Mailman-Developers at python.org
>> http://mail.python.org/mailman/listinfo/mailman-developers
>> Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
>> Searchable Archives: 
>> http://www.mail-archive.com/mailman-developers%40python.org/
>> Unsubscribe: 
>> http://mail.python.org/mailman/options/mailman-developers/japruim%40raoset.com 
>>
>>
>> Security Policy: 
>> http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp
>>
>
> -- 
>
> Jason Pruim
> Raoset Inc.
> Technology Manager
> MQC Specialist
> 3251 132nd ave
> Holland, MI, 49424-9337
> www.raoset.com
> japruim at raoset.com
>
>
>