Re: [vps-mail] REQUEST

[Scott Wiersdorf <scottw@xxxxxxxxxxxx>]

On Fri, Jun 24, 2005 at 06:27:19PM -0500, Rae French wrote:
> If you follow the From: line and the In-reply-to: line, you can put 
> together my email address.

Please see <http://perlcode.org/lists/vps-mail/>

I've reindexed and removed all headers except the Subject, From, and
Date (you might occasionally come across some other header that I
haven't seen yet--please let me know if you do and I'll remove it
also).

This list isn't maintained at Verio's expense, I do it because I want
to and it's a way for other resellers to "catch up" or find solutions
to problems we've already faced.

Fwiw, spammers will spend most of their time trolling the public
spamassassin lists and other bigger fish. While we're addressing our
own problems, we're not unique. All (or nearly so) of our reseller
solutions for managing mail come from open-source software such as
sendmail, milter-greylist, milter-regex, procmail, SpamAssassin,
ClamAV and the like. These solutions power *many* organizations other
than viaVerio; spammers trying to thwart these solutions will spend
time in those mailing lists' archives, not ours.

As for attacks against *us*, yes I admit an archive is a good place
to find some information. I believe, however, that risk is acceptable
in the face of the benefits we gain from the archive. Even with the
open archive, I don't think any of us has posted anything particularly
technically dangerous or anything that might compromise our security
(i.e., passwords, specific and complete configuration files, etc.).

Locking down the archive is only a delay tactic for someone bent on
getting info (i.e., as someone already mentioned, anyone can subscribe
to the list and post, etc).

I'm open to further suggestions and comments (even useful criticism).

Scott
-- 
Scott Wiersdorf
scottw@xxxxxxxxxxxx
======================================================================
This is <vps-mail@xxxxxxxxxxxx>       <http://www.perlcode.org/lists/>
Before posting a question, please search the archives (see above URL).