Re: [GTALUG] We are having DMARC/DKIM troubles ...

On 06/12/2016 02:23 AM, ac@main.me wrote:
On Sat, 11 Jun 2016 18:24:43 -0400 CLIFFORD ILKAY <clifford_ilkay@dinamis.com> wrote: <snip>
This is obviously a problem for non-technical users. They simply do not understand any of this and it all becomes too complicated for them. Most users do not know how to add anything to their address book or create message filters/rules and they think the list server is broken and should be "fixed" when in fact, it's their email provider. I never see these issues with subscribers who have Gmail accounts, by the way. Email is dying a slow death. The alternatives, like Twitter direct messaging, Slack (ugh!), WhatsApp (double ugh!), and various instant messaging schemes are worse. Those will eventually be polluted by spammers, too.
Would like to start my reply by saying that I received my first spam in 1987, from CompuServ and that imnsho email will never die, it is too well suited to human nature.
These days, I am trying all sorts of new ways of trapping new spam bots and figuring out how to get more spam, more data, more bots. Huge multi nationals like Google etc do not share their data
To understand the small spam problem in 2016, one has to understand the differences in modern email.
Mass email providers like @gmail.com @yahoo.com @hotmail.com are hard/difficult to block - and they know that - so some of them, like yahoo.com for example, does not spend as much money as say google.com does - to fight abuse.
If @dinamis.com would dare to send spam - @dinamis.com would simply end up in a rbl
Our rbl's commonly block at least 100 yahoo servers for each single google.com server and the blocks last anything from an hour to weeks, depending if they stop their spam
Interestingly, if Google is blocked for spam they bounce back to their user with : technical error at the receiver - this is kinda evil as it implies that their is a problem at the receiving server, when Google full well knows that their is an admin restriction due to Google being abusive...
branding I guess, users have to be kept as mushrooms for as long as possible so that the large guys can dominate and take over the world :)
All you need to end up on an RBL is one hacked user. Been there. Cleaned up after that. If you have a few tens to hundreds of million of clients(like the big guys) you will have lots who are compromised and now sources of spam. Its amazing the the big guys don't have all their mail servers blocked all the time. Your right that its annoying that the big guys seem to get by without paying attention to the rest of us. As an aside some times I get the feeling RBLs are getting close to being extortionist in their tactics. I have had clients with mail servers that get black listed and they find themselves having to pay to get off some of the RBL's. -- Alvin Starr || voice: (905)513-7688 Netvel Inc. || Cell: (416)806-0133 alvin@netvel.net ||

On Sun, Jun 12, 2016 at 07:54:31PM -0400, Alvin Starr wrote:
If you have a few tens to hundreds of million of clients(like the big guys) you will have lots who are compromised and now sources of spam. Its amazing the the big guys don't have all their mail servers blocked all the time.
Probably because they run/own those blacklists? -- William

On Sun, 12 Jun 2016 19:54:31 -0400 Alvin Starr <alvin@netvel.net> wrote: <snip snippety snip>
All you need to end up on an RBL is one hacked user. Been there. Cleaned up after that.
If you have a few tens to hundreds of million of clients(like the big guys) you will have lots who are compromised and now sources of spam. Its amazing the the big guys don't have all their mail servers blocked all the time.
The bigger they get the more difficult it becomes to block them, the only spam that comes through our new anti spam system we call hiders and multi's multis - google, hotmail, yahoo hiders - the legit ESP's that also sends spam (they send email fro .gov and then offers thge service of sending marketing email) almost no other spam gets through at all (as hacked b0xen are added so quickly)
Your right that its annoying that the big guys seem to get by without paying attention to the rest of us.
blasting out email with no/limited costs - I am not really surprised that people do not react more strongly to this.. imho people have been in love with google etc and when you are in love you do not see the flaws in the matrix
As an aside some times I get the feeling RBLs are getting close to being extortionist in their tactics. I have had clients with mail servers that get black listed and they find themselves having to pay to get off some of the RBL's.
we as a Linux and open source community should help to educate people people should not use non RFC operated RBL's (see compliance bottom here: http://spamid.net/?spam=definitions ) Andre
participants (3)
-
ac
-
Alvin Starr
-
William Park