«

On 7 Mar 2004 20:30:21 GMT, "[ Doc Jeff ]" <>, whilst in
the alt.computer.security newsfroup, articulated the following sentiments :

>COTSE has absolutely the BEST e-mail filters on the planet. You really
>can't get more control over your e-mail anywhere else. In the year+ I've
>had my account there, I have yet to receive even one piece of spam other
>than those I've manually injected to train one of the filters.
>
>Btw, I should explain something... when people ask for anti-spam tools, I
>start by pointing towards anti-virus because, oftentimes, anti-spam tools
>go best with anti-virus tools. After all, don't most viruses/trojans arrive
>through e-mail, just like spam?

Nice answer. Hehe.

>
>Doc
>
>irc2.peacefulhaven.net would like more users, please.

So would mine. It's in the attic ^^

Regs, Pete.

On 7 Mar 2004 20:30:21 GMT, [ Doc Jeff ] <> wrote:
>
>
> Alan Connor <> wrote in
> news:uCA2c.22992$ link.net:
>
>>>> I am looking for a reliable anti-spam software program for home use,
>>>> preferrably free. Any recommedations are greatly thankful.
>>>
>>> http://www.grisoft.com AVG free. Very good, small, fast, did I
>>> mention free?
>>>
>>> Now then... maybe you could take a look at the link in my sig block
>>> down at the bottom?
>
>
>> Okay. Tell us about it.
>
> COTSE has absolutely the BEST e-mail filters on the planet. You really
> can't get more control over your e-mail anywhere else. In the year+ I've
> had my account there, I have yet to receive even one piece of spam other
> than those I've manually injected to train one of the filters.
>
> Btw, I should explain something... when people ask for anti-spam tools, I
> start by pointing towards anti-virus because, oftentimes, anti-spam tools
> go best with anti-virus tools. After all, don't most viruses/trojans arrive
> through e-mail, just like spam?
>
>
>

Well, that is a bit of an exaggeration....


I run Linux here, and wrote my own spam killing program, which you can
find at http://tinyurl.com/3c3ag.

It's just a bunch of scripts with procmail at its heart, but I get no
spam at all and *I* am in control of my mail, no one else.

No one has any problem at all getting through to me IF they use their actual
return address, read that mail box, and are not sending bulk mail without
asking me first.

Here's how it works:

-----------------------------------------------------------------------------

pass-list ---------> block-list (content-filter) ---------> Challenge-Response

Along with many others, I use a filter designed like the above:

I never see any spam.

I send out very few C-Rs.

I don't have to mess with my filter at all.

Spam is just gone from my life, no muss and no fuss.

The only complaint I have ever had was from a domain that turned
out to be on the dnsbl (dns blacklist) for spamming.

Anyone can reach me with no muss or fuss if they use their real return
address.

(In some ways, Challenge-Responses are like Caller-ID for phones: Someone
who wants to communicate with you must use their real return address, and
actually read the mail there.)

On the rare occassion that I send a C-R to an innocent party (I have to
assume that his has happenned at least once.) whose address has been forged,
then I have done them the favor of letting them know that it is being forged,
which can cause a person one hell of a lot of trouble.

They have my real address and are told in the C-R that I have a copy
of the headers of the post if they need it.


Like I said: ONE complaint, ever, and from spammers.

C-Rs are only one stage, and the final stage, of an effective mail filter
that is designed like so:


PASSLIST

Where every friend, associate, commercial mailing list, discussion
mailing list, business, and non-profit org is given free access
to my inbox with my consent.

Anyone you send mail to must be passlisted.

This is where you make SURE you get all the mail you REALLY need
to get, or just want.


BLOCKLIST (Content-Filter)

General, to kill most of the spam. You can use SpamAssasin here
called by procmail. Or just use good procmail recipes.

And specific, where domains and addresses are killed for various
offenses, generally repeated C-Rs that aren't returned.

(Do remember to blocklist your own address, or some clown will
send mail to you with your own address on the From: line and
set up a mail loop.)

You just can't catch all the spam with a content-filter like
SpamAssassin. If you even try, you will end up losing mail
that isn't spam, and getting some spam anyway. And you have
to update your filters all the time to keep abreast of the
spammers.

(As well as save the spam to look through to make sure there
isn't any mail you want in there, which rather defeats the
whole purpose of a spam filter, in my opinion. I don't want
to ever see that garbage.)

Better to just kill the mail you KNOW is spam, and send a
C-R to the few that your content filter isn't sure about.

CHALLENGE-RESPONSE

A little note that asks the receiver to paste a password on the
Subject: line and return it.

The Subject line on the C-R should have Re: original subject
on it.

This forces people to use their actual email address if they want
me to see their posts.

(And to read their mail...)

This is only required once. From then on, it's as if there is no
filter on my mail from their perspective.



AC



--
Pass-List -----> Block-List ----> Challenge-Response
The key to taking control of your mailbox.
http://www.uwasa.fi/~ts/info/spamfoil.html
http://tinyurl.com/3c3ag