[RFCI-Discuss] RFC-ignorant.org list accuracy and refresh frequency...

[mouss]

Jean-Marc Pigeon a écrit :
> Bonjour Mouss,
> 
>> 1- It will be received in 4 or 5 days. I only saw it because I have
>> access to the server logs. If I relayed via an external server, I
>> wouldn't see anything until 4/5 days. This in itself is bad.
> 	Agreed with you this not optimal, as you should receive
> 	"trouble warning" within 4 hours (lets say you have sendmail).
> 	But in same time, intended recipient, hastily waiting for
> 	your Email can see your try in its own logs (searching
> 	with by your name) and click the acknowledge.

logs? which logs? again, I only saw it because I have full control over
my relay.

- a "normal" user wouldn't see anything, because he can't see the logs
- if I relayed via an MSP/ISP, say if I use free.fr as my relay, I would
see nothing until I get an error 5 days later.

if you can't see the problem, please let's stop here.

> 	Such the Email will pass next SMTP automatic sending
> 	try and the mail will be accepted within 4 hours.

1- did you get my email? can you show me the content?
2- do you mean that even if I don't click on the challenge link, my mail
will be accepted after 4 hours? so a spammer can simply retry after 4
hours?

> 	This is a way to smooth false positive trouble,
> 	over time, system is learning from where you come
> 	from and genuine traffic (even coming from server
> 	used to nasty bulk mailing) is coming in quickly.
> 	

if that's your defence against spammers, I wish you luck.

> 	
> 
>> 3- also, if a spammer forges my address and sends via his ISP relay,
>> then I would get the bounce.
> 	You know, if a spammer is able to forge BOTH my Email
> 	domain and my IP number, I'll be more than worry than
> 	"getting bounce" (I do not know about you),

I meant: if a spammer forges my s_sender_ address and sends via ISP.
then the ISP will send me a bounce. so the result is that I get
backscatter, even if it's not from you (so yes, it's better for you than
"direct backscatter", but still...)

> 	that would mean my server is an open relay.. Right?
> 	we see your sender ID being both domain and IP. 
> 
> 	(not sure our exchange is still meaningful for rfci-discuss)
> 

if that can help you understand the limitations of your system, and the
problems that it causes, it's appropriate.

otherwise, yes, it's useless.