T-Online (German provider) enhances spam protection, and blocks legit listmail

Just a quick pointer to an article in German for those 350+ Subscribers with a t-online-Mailaddress. T-Online verbessert den Spamschutz - Legitime Mails werden abgelehnt. Summary: T-Online now blocks non-spam Mail from Debians Listserver.

March 31, 2008 · Cord

Today i kicked 560 Mailaddresses off lists.debian.org ...

… because they are bouncing. In my ongoing attempt to investigate and fix problems of our mailinglist-server, i found that we only had a working bounce-detection for lists starting debian-* minus debian-private and the three digest-lists. So i rewrote some parts of the bounce detection: We now have four categories of lists: high (30 or more mails a day) medium (20 or more mails a week) low (10 or more mails a month) very-low (the rest) for these four categories we calculate a spam-rate depending on the number of distributed messages and the number of bounces in the timerange of 24 hours for ‘high’ lists, 7 days for ‘medium’ lists, 30 days for ’low’ lists and 90 days for ‘very-low’ lists. ...

January 26, 2008 · Cord

Debian Lists vs. Mail2News-Gateways

While analysing the pole setters in our internal bouncers-Hitlist i found that some of them run a mail2news-Gateway. The problem is: our Mailinglists leave Mail-Headers mostly untouched, and so headers like X-Trace or X-Complaints-To are passed through without modifications. If a mail containing those headers is handed over to inews (as in INN) it rejects it, and the bounce comes back to us: <> XXXXX@XXX.com> >: Command died with status 1: “/usr/bin/maildrop”. Command output: inews: cannot send article to server: 441 Can’t set system “X-Complaints-To” header inews: article not posted ...

January 14, 2008 · Cord

Spamwaves on Lists or 'oops, i did it again'

Just a quick note: while wading through the list-archives, drop-boxes and list-configuration to find false positives and possiblities to optimise our mailinglists spam level i accidently removed the inclusion of our spamfilters from most lists. I appologise for this. Luckily zobel discovered my error and fixed it at 14:30 CET.

January 8, 2008 · Cord

Precedence-Mail-Headers?

I’m just wadeing through Debian-Mailinglists on the search for enhancements and false-positives. and i just came over debian-security-announce, a lists that sends a helpful message back to submitters that aren’t allowed to send out advisories. That message didn’t contain a Precedence-Header so i added one, and wondered which value would be appropriate… I remember to have seen three values: ‘junk’, ‘bulk’ and ’list’ (the latter should be set for all our Mailinglists). ...

January 2, 2008 · Cord

mutt: autoviewing text/html

it sometimes funny, i’m working with mutt since about 10 years, (the 5 years before i was using elm) and just found out how i can view pure text/html-Mails without fiddeling with piping and things. set implicit_autoview in .muttrc does the trick. but now mutt also prefers the text/html-part of multipart/alternative-mails, this is going to far for me. i want the text/plain-part if available. mutt has also a solution here: ...

November 3, 2007 · Cord

sendmail uses ident by default

I have no idea how the other major MTAs handle this, but sendmail seems to issue an ident-auth-request on each connect it gets. As i think this is rather useless, as most hosts don’t answer it, and, even if they would, the answer is easily fakeable, i switched it off. adding define(confTO_IDENT', 0’)dnl to /etc/mail/sendmail.mc disables this. Sadly this isn’t documented, for confTO_IDENT it only states The timeout waiting for a response to an IDENT query. ...

September 29, 2007 · Cord

Analysis of subscribed Domains on Debian-Listserver

From time to time we have the problem that a mail posted to a list triggers an autoresponse (vacation, bounce, tdma) from an unexpected source. Sometimes it isn’t possible to identify the subscriber who is causing this. One example for this was “petsupermarket”. So i wrote a small tool, which takes Mailadresses as input and resolves the domains until it reaches IP-level, so it is possible to identify “related” addresses to such an incident. ...

September 14, 2007 · Cord

private Spamstats April 2007

you see my Spamstats for the time i run an own server for my domain. The input consists mainly from cord@Wunder-Nett.org that is in existence since mid-1996, and a (tuned) catch all on cord.de. Unreadable is the stuff encoded as russian, chinese, korean, … Backscatter are Bounces due to misused Mailadresses. Virusspam is the stuff ClamAV catches. Spam is recognized by bogofilter Dupes were Mails with the same Message-Id in a short time period. Ham are those messages that survived the other filters. In 05/2004 i had a big downtime due to broken Harddisk and/or cheap IDE-Cables (which was finally solved in 2006). In 11/2004 i became Debian-Listmaster, and forwarded the listmaster-mails to my system. In 08/2005 i stopped forwarding listmaster-Mail and the admin-mail from LUG-OWL and let them drop into a local Mailbox on the specific servers. In 06/2006 The power supply of my server died, and HaJo had a fitting spare device, so i took it to the local hardware gods (C&M sorry, only Flash) and they implanted it, they also replaced all Fans (6 of which 4 were stuck) and replaced the IDE-Cables. Now i even could switch on DMA without risking a crash. (Man, 3years of crippled server). As you see, the system is now able to accept even more spam. In 12/2006 i added greylisting on my server. My 2nd MX currently doesn’t do greylisting. ...

May 4, 2007 · Cord

Debian Weekly News is late? - Blame listmasters!

Hi. We were notified that German DWN, and the Original DWN weren’t sent out. Investigation showed that Diplomats (in German translation Diplomaten) matched the bad word ‘Diploma’, so it is dropped in our spambox. I resent German DWN yesterday and the Original DWN some minutes ago. sorry for the inconvinience.

May 1, 2007 · Cord