[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Asrg] Please critique my anti-spam system



On 2005-01-10 09:14:35 +1000, Laird Breyer wrote:
> On Jan 09 2005, Peter J. Holzer wrote:
> 
> > > Either you're confused or I am. Michael sends me two messages, once as
> > > Michael (which is unsolicited, and he's not whitelisted, so gets a CAPTCHA),
> > > and once as asrg at ietf.org, which is whitelisted since I've subscribed to 
> > > the list. 
> > 
> > But both messages are sent to an active subaddress, so they are
> > accepted without a CAPTCHA. See
> > http://home.nyc.rr.com/spamsolution/An%20Effective%20Solution%20for%20Spam.htm
> 
> How would Michael's MUA know the subaddress?

It's in your From: header.

> Only the list expander knows the subaddress. Michael's MUA sends mail
> to the main address, which replies with a CAPTCHA.

That's not the way I understood that it works.

ISACS rewrites all outgoing mails to contain a unique subaddress for
each recipient. Thus all your mails to the mailing-list will contain
your subaddress for the recipient asrg at ietf.org, (e.g. <laird.123 at ...>),
not your main address <laird at ...>.

When Michael hits the group reply button, his MUA will take the
addresses from the headers and compose a mail to <asrg at ietf.org> and
<laird.123 at ...> (It doesn't know that this is a subaddress, nor what the
main address is).

	hp

-- 
   _  | Peter J. Holzer    | Je höher der Norden, desto weniger wird
|_|_) | Sysadmin WSR       | überhaupt gesprochen, also auch kein Dialekt.
| |   | hjp at hjp.at         | Hallig Gröde ist fast gänzlich dialektfrei.
__/   | http://www.hjp.at/ |   -- Hannes Petersen in desd

Attachment: pgpjZOfa61MiU.pgp
Description: PGP signature

_______________________________________________
Asrg mailing list
Asrg at ietf.org
https://www1.ietf.org/mailman/listinfo/asrg