<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:creativeCommons="http://backend.userland.com/creativeCommonsRssModule"	>
<channel>
	<title>Comments on: note to anyone who runs their own mail server</title>
	<atom:link href="http://tieguy.org/blog/2007/04/09/note-to-anyone-who-runs-their-own-mail-server/feed/" rel="self" type="application/rss+xml" />
	<link>http://tieguy.org/blog/2007/04/09/note-to-anyone-who-runs-their-own-mail-server/</link>
	<description>Ramblings on software, law, and the spaces in between.</description>
	<lastBuildDate>Wed, 23 May 2012 07:48:43 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
	<item>
		<title>By: Michael Fleming&#8217;s Networked Mind &#124; A word on DNS blacklists.</title>
		<link>http://tieguy.org/blog/2007/04/09/note-to-anyone-who-runs-their-own-mail-server/comment-page-1/#comment-26077</link>
		<dc:creator>Michael Fleming&#8217;s Networked Mind &#124; A word on DNS blacklists.</dc:creator>
		<pubDate>Sun, 30 Dec 2007 16:23:37 +0000</pubDate>
		<guid isPermaLink="false">http://tieguy.org/blog/2007/04/09/note-to-anyone-who-runs-their-own-mail-server/#comment-26077</guid>
		<description>&lt;!--%kramer-ref-pre%--&gt;[...] (&#8221;DNSBLs&#8221;) among some members of the Internet community (pro-DNSBL here and slightly con here for [...]&lt;!--%kramer-ref-post%--&gt;</description>
		<content:encoded><![CDATA[<p><a href="http://dev.wp-plugins.org/wiki/Kramer"><img src="http://tieguy.org/blog/wp-content/plugins/kramer.php?kramer=gif-icon" class="technorati-balloon" alt="Kramer auto Pingback" style="border:0;" /></a>[...] (&#8221;DNSBLs&#8221;) among some members of the Internet community (pro-DNSBL here and slightly con here for [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jeff</title>
		<link>http://tieguy.org/blog/2007/04/09/note-to-anyone-who-runs-their-own-mail-server/comment-page-1/#comment-14841</link>
		<dc:creator>Jeff</dc:creator>
		<pubDate>Fri, 20 Apr 2007 20:46:07 +0000</pubDate>
		<guid isPermaLink="false">http://tieguy.org/blog/2007/04/09/note-to-anyone-who-runs-their-own-mail-server/#comment-14841</guid>
		<description>Large difference between detecting spammers and blocking spammers.  They can go ahead and detect spammers all they want, and shut off referenced Gmail accounts -- which may or may not be actual guilty parties if return paths are being spoofed -- but if they&#039;d close their hole they&#039;d be blocking spammers to begin with.  Oh, and they&#039;d not get listed on DSBL.  Gmail also has a long history of being listed on SpamCop as well, meaning users of either service will see this issue.  And again, if they&#039;d just plug their hole...

Anyways, DSBL doesn&#039;t shut off the third largest source of legitimate mail.  DSBL users do.  DSBL lists them when they collect hard evidence that they&#039;re spam-friendly, and they have every right to treat every service equally.  This doesn&#039;t make them dogmatic, it makes them fair.  They give their users the hard facts, and it&#039;s up to the users to decide to put in an &quot;allow&quot; rule specifically for Gmail, unless they want to accept all the other spam junk that DSBL&#039;s lists block.  Personally, I appreciate this fairness.  My mail server&#039;s been repeatedly scanned for open relays and it&#039;s locked down tight -- and my reward is not getting publicly shamed by being added to open relay block lists.

There&#039;s no reason Gmail should be treated any differently.  Again, it&#039;s up to DSBL users to decide how to resolve the situation if Google refuses to fix the problem...but it has nothing to do with dogma, and it has nothing to do with any sort of a DSBL problem.

If you think Gmail should not be held accountable and be given a pass just because it&#039;s a very large (users and volume) mail service, then perhaps you think Microsoft should not be held accountable for security holes in Windows just because it&#039;s the most widely-used operating system.</description>
		<content:encoded><![CDATA[<p>Large difference between detecting spammers and blocking spammers.  They can go ahead and detect spammers all they want, and shut off referenced Gmail accounts &#8212; which may or may not be actual guilty parties if return paths are being spoofed &#8212; but if they&#8217;d close their hole they&#8217;d be blocking spammers to begin with.  Oh, and they&#8217;d not get listed on DSBL.  Gmail also has a long history of being listed on SpamCop as well, meaning users of either service will see this issue.  And again, if they&#8217;d just plug their hole&#8230;</p>
<p>Anyways, DSBL doesn&#8217;t shut off the third largest source of legitimate mail.  DSBL users do.  DSBL lists them when they collect hard evidence that they&#8217;re spam-friendly, and they have every right to treat every service equally.  This doesn&#8217;t make them dogmatic, it makes them fair.  They give their users the hard facts, and it&#8217;s up to the users to decide to put in an &#8220;allow&#8221; rule specifically for Gmail, unless they want to accept all the other spam junk that DSBL&#8217;s lists block.  Personally, I appreciate this fairness.  My mail server&#8217;s been repeatedly scanned for open relays and it&#8217;s locked down tight &#8212; and my reward is not getting publicly shamed by being added to open relay block lists.</p>
<p>There&#8217;s no reason Gmail should be treated any differently.  Again, it&#8217;s up to DSBL users to decide how to resolve the situation if Google refuses to fix the problem&#8230;but it has nothing to do with dogma, and it has nothing to do with any sort of a DSBL problem.</p>
<p>If you think Gmail should not be held accountable and be given a pass just because it&#8217;s a very large (users and volume) mail service, then perhaps you think Microsoft should not be held accountable for security holes in Windows just because it&#8217;s the most widely-used operating system.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Luis</title>
		<link>http://tieguy.org/blog/2007/04/09/note-to-anyone-who-runs-their-own-mail-server/comment-page-1/#comment-14823</link>
		<dc:creator>Luis</dc:creator>
		<pubDate>Fri, 20 Apr 2007 19:36:05 +0000</pubDate>
		<guid isPermaLink="false">http://tieguy.org/blog/2007/04/09/note-to-anyone-who-runs-their-own-mail-server/#comment-14823</guid>
		<description>Your own link says that Google has automated processes in place to detect spamming, which presumably includes measuring volume of relaying.

I certainly want the problem solved in the long term, and I&#039;ll go ahead and bitch to gmail, but in the meantime, anyone who wants mail from the tens of millions of gmail users should turn off DSBL, and they should consider ditching any service which is so dogmatic about open relays that they are willing to shut off the third largest source of legitimate email.</description>
		<content:encoded><![CDATA[<p>Your own link says that Google has automated processes in place to detect spamming, which presumably includes measuring volume of relaying.</p>
<p>I certainly want the problem solved in the long term, and I&#8217;ll go ahead and bitch to gmail, but in the meantime, anyone who wants mail from the tens of millions of gmail users should turn off DSBL, and they should consider ditching any service which is so dogmatic about open relays that they are willing to shut off the third largest source of legitimate email.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jeff</title>
		<link>http://tieguy.org/blog/2007/04/09/note-to-anyone-who-runs-their-own-mail-server/comment-page-1/#comment-14803</link>
		<dc:creator>Jeff</dc:creator>
		<pubDate>Fri, 20 Apr 2007 18:43:56 +0000</pubDate>
		<guid isPermaLink="false">http://tieguy.org/blog/2007/04/09/note-to-anyone-who-runs-their-own-mail-server/#comment-14803</guid>
		<description>I made no assumption as to how you specifically would treat Hotmail.  I made an assumption as to how I would expect people to generally react to Hotmail, given how online press has reacted to other security flaps there in the past.

I&#039;m sorry my sarcasm about who would see the consequences of Gmail&#039;s actions was lost on you.

As to (1), I have seen nothing from Gmail where they claim that they are blocking spammers.  Conversely I have seen evidence that they admit they are an open relay to DSBL administrators.

As far as (2), I fail to see why that makes a difference.  My mail server could have twenty million users.  If it&#039;s an open relay, it&#039;s still an open relay.  Having more users doesn&#039;t make me more or less &quot;right&quot; about having one.  It just means that people using those blocklists will then have a harder decision when deciding whether to allow all the other spam-dumping servers to talk to them as well just to let Gmail in, or whether to keep Gmail out to keep the other spam out.

Anyways, you&#039;ve totally missed my original point, which was, why not bitch at Gmail to fix their problem instead of DSBL?  You can react the same way regardless, by not using DSBL&#039;s blocklists, or adding a Gmail exception, if you can find a server list.  But if you want the problem to be solved permanently, at least go to (and blame) the cause of it, not the effect.</description>
		<content:encoded><![CDATA[<p>I made no assumption as to how you specifically would treat Hotmail.  I made an assumption as to how I would expect people to generally react to Hotmail, given how online press has reacted to other security flaps there in the past.</p>
<p>I&#8217;m sorry my sarcasm about who would see the consequences of Gmail&#8217;s actions was lost on you.</p>
<p>As to (1), I have seen nothing from Gmail where they claim that they are blocking spammers.  Conversely I have seen evidence that they admit they are an open relay to DSBL administrators.</p>
<p>As far as (2), I fail to see why that makes a difference.  My mail server could have twenty million users.  If it&#8217;s an open relay, it&#8217;s still an open relay.  Having more users doesn&#8217;t make me more or less &#8220;right&#8221; about having one.  It just means that people using those blocklists will then have a harder decision when deciding whether to allow all the other spam-dumping servers to talk to them as well just to let Gmail in, or whether to keep Gmail out to keep the other spam out.</p>
<p>Anyways, you&#8217;ve totally missed my original point, which was, why not bitch at Gmail to fix their problem instead of DSBL?  You can react the same way regardless, by not using DSBL&#8217;s blocklists, or adding a Gmail exception, if you can find a server list.  But if you want the problem to be solved permanently, at least go to (and blame) the cause of it, not the effect.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Luis</title>
		<link>http://tieguy.org/blog/2007/04/09/note-to-anyone-who-runs-their-own-mail-server/comment-page-1/#comment-14802</link>
		<dc:creator>Luis</dc:creator>
		<pubDate>Fri, 20 Apr 2007 18:33:47 +0000</pubDate>
		<guid isPermaLink="false">http://tieguy.org/blog/2007/04/09/note-to-anyone-who-runs-their-own-mail-server/#comment-14802</guid>
		<description>You&#039;re making assumptions about how I&#039;d treat hotmail- careful there. Besides the broken assumption, the bottom line is that you&#039;re not blocking some accidentally open relay with a handful of legitimate users and no policy of blocking spammers- you&#039;re blocking an open relay which (1) claims to be blocking spammers (even if it is technically open) and (2) has tens of millions of legitimate users. There is a fine line being &#039;taking a principled stand&#039; and &#039;being inflexibly boneheaded&#039;, and you&#039;re on the wrong side of it.

As far as your assumptions about who is being hurt... I found out about this because someone using DSBL asked me for information and didn&#039;t get it. In this particular case, no skin off my back; big skin off his. He is the one who was hurt, not me.  But I&#039;m sure this is the first time anyone who uses DSBL has ever asked for information from a gmail user, so maybe you&#039;re right.</description>
		<content:encoded><![CDATA[<p>You&#8217;re making assumptions about how I&#8217;d treat hotmail- careful there. Besides the broken assumption, the bottom line is that you&#8217;re not blocking some accidentally open relay with a handful of legitimate users and no policy of blocking spammers- you&#8217;re blocking an open relay which (1) claims to be blocking spammers (even if it is technically open) and (2) has tens of millions of legitimate users. There is a fine line being &#8216;taking a principled stand&#8217; and &#8216;being inflexibly boneheaded&#8217;, and you&#8217;re on the wrong side of it.</p>
<p>As far as your assumptions about who is being hurt&#8230; I found out about this because someone using DSBL asked me for information and didn&#8217;t get it. In this particular case, no skin off my back; big skin off his. He is the one who was hurt, not me.  But I&#8217;m sure this is the first time anyone who uses DSBL has ever asked for information from a gmail user, so maybe you&#8217;re right.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jeff</title>
		<link>http://tieguy.org/blog/2007/04/09/note-to-anyone-who-runs-their-own-mail-server/comment-page-1/#comment-14798</link>
		<dc:creator>Jeff</dc:creator>
		<pubDate>Fri, 20 Apr 2007 18:19:55 +0000</pubDate>
		<guid isPermaLink="false">http://tieguy.org/blog/2007/04/09/note-to-anyone-who-runs-their-own-mail-server/#comment-14798</guid>
		<description>I don&#039;t see how traffic analysis has anything at all to do with gmail being wrong or right.  If I log onto gmail&#039;s servers from the outside world, don&#039;t authenticate, and can send email to anyone I want, that&#039;s an open relay.  There&#039;s no analysis, traffic or otherwise.  It is what it is, and the facts show that Gmail is wrong.  In fact, if you read the email message I linked to, the Gmail person acknowledges that they&#039;re running a relay.

You could say that it doesn&#039;t hurt DSBL&#039;s users at all.  After all, they never see the consequences of Gmail&#039;s actions.  It&#039;s Gmail users whose mail get bounced back that experience these failures.

DSBL isn&#039;t refusing to cope with reality.  They&#039;re facing the reality that Gmail is an open relay, and they&#039;re treating it like every other open relay.  That&#039;s their job, and they&#039;re simply refusing to treat Gmail different than other providers.  If Hotmail was an open relay, everyone would bitch at Microsoft to fix the problem, not DSBL...why is Google being treated differently?</description>
		<content:encoded><![CDATA[<p>I don&#8217;t see how traffic analysis has anything at all to do with gmail being wrong or right.  If I log onto gmail&#8217;s servers from the outside world, don&#8217;t authenticate, and can send email to anyone I want, that&#8217;s an open relay.  There&#8217;s no analysis, traffic or otherwise.  It is what it is, and the facts show that Gmail is wrong.  In fact, if you read the email message I linked to, the Gmail person acknowledges that they&#8217;re running a relay.</p>
<p>You could say that it doesn&#8217;t hurt DSBL&#8217;s users at all.  After all, they never see the consequences of Gmail&#8217;s actions.  It&#8217;s Gmail users whose mail get bounced back that experience these failures.</p>
<p>DSBL isn&#8217;t refusing to cope with reality.  They&#8217;re facing the reality that Gmail is an open relay, and they&#8217;re treating it like every other open relay.  That&#8217;s their job, and they&#8217;re simply refusing to treat Gmail different than other providers.  If Hotmail was an open relay, everyone would bitch at Microsoft to fix the problem, not DSBL&#8230;why is Google being treated differently?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Luis</title>
		<link>http://tieguy.org/blog/2007/04/09/note-to-anyone-who-runs-their-own-mail-server/comment-page-1/#comment-14794</link>
		<dc:creator>Luis</dc:creator>
		<pubDate>Fri, 20 Apr 2007 18:14:52 +0000</pubDate>
		<guid isPermaLink="false">http://tieguy.org/blog/2007/04/09/note-to-anyone-who-runs-their-own-mail-server/#comment-14794</guid>
		<description>Even if gmail is wrong (which I&#039;m not sure it is, given that they can do vastly more traffic analysis than the average mail forwarder), by blocking gmail, DSBL is hurting DSBL&#039;s users much more than DSBL is hurting gmail. That is a shitty reality, but it is a reality. Any blacklist which refuses to cope with reality isn&#039;t one that real people should use.</description>
		<content:encoded><![CDATA[<p>Even if gmail is wrong (which I&#8217;m not sure it is, given that they can do vastly more traffic analysis than the average mail forwarder), by blocking gmail, DSBL is hurting DSBL&#8217;s users much more than DSBL is hurting gmail. That is a shitty reality, but it is a reality. Any blacklist which refuses to cope with reality isn&#8217;t one that real people should use.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jeff</title>
		<link>http://tieguy.org/blog/2007/04/09/note-to-anyone-who-runs-their-own-mail-server/comment-page-1/#comment-14790</link>
		<dc:creator>Jeff</dc:creator>
		<pubDate>Fri, 20 Apr 2007 18:01:42 +0000</pubDate>
		<guid isPermaLink="false">http://tieguy.org/blog/2007/04/09/note-to-anyone-who-runs-their-own-mail-server/#comment-14790</guid>
		<description>If you&#039;d bothered to check DSBL&#039;s site instead of complaining that &quot;they need to fix this&quot; you&#039;d have found out that the problem is entirely on Gmail&#039;s side of things.  Gmail lets unauthorized users relay messages, pure and simple.  Here&#039;s a page with proof:

http://dsbl.org/message?37724616

Note the following lines:
MAIL FROM:
RCPT TO:

and in the email headers:
Return-Path: 

Simply by fudging the return path they were able to have the Gmail server relay a message from one address to another, with neither being a Gmail address.

This is Gmail&#039;s problem, and your efforts would be better spent complaining to Gmail to fix their actual problem instead of DSBL to fix a nonexistent problem.

You have an uphill battle, as, spitting in the face of every best practice email system admins have, Gmail is concerned only with accounts that &quot;do&quot; send spam, not with accounts that &quot;could&quot; send spam.  See their unbelievably ignorant message here:

http://dsbl.org/email?9457</description>
		<content:encoded><![CDATA[<p>If you&#8217;d bothered to check DSBL&#8217;s site instead of complaining that &#8220;they need to fix this&#8221; you&#8217;d have found out that the problem is entirely on Gmail&#8217;s side of things.  Gmail lets unauthorized users relay messages, pure and simple.  Here&#8217;s a page with proof:</p>
<p><a href="http://dsbl.org/message?37724616" rel="nofollow">http://dsbl.org/message?37724616</a></p>
<p>Note the following lines:<br />
MAIL FROM:<br />
RCPT TO:</p>
<p>and in the email headers:<br />
Return-Path: </p>
<p>Simply by fudging the return path they were able to have the Gmail server relay a message from one address to another, with neither being a Gmail address.</p>
<p>This is Gmail&#8217;s problem, and your efforts would be better spent complaining to Gmail to fix their actual problem instead of DSBL to fix a nonexistent problem.</p>
<p>You have an uphill battle, as, spitting in the face of every best practice email system admins have, Gmail is concerned only with accounts that &#8220;do&#8221; send spam, not with accounts that &#8220;could&#8221; send spam.  See their unbelievably ignorant message here:</p>
<p><a href="http://dsbl.org/email?9457" rel="nofollow">http://dsbl.org/email?9457</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Abel Cheung</title>
		<link>http://tieguy.org/blog/2007/04/09/note-to-anyone-who-runs-their-own-mail-server/comment-page-1/#comment-14351</link>
		<dc:creator>Abel Cheung</dc:creator>
		<pubDate>Thu, 12 Apr 2007 11:24:40 +0000</pubDate>
		<guid isPermaLink="false">http://tieguy.org/blog/2007/04/09/note-to-anyone-who-runs-their-own-mail-server/#comment-14351</guid>
		<description>Just FYI -- I&#039;ve had experience about &lt;a href=&quot;http://www.au.sorbs.net/lookup.shtml?66.249.92.171l&quot; rel=&quot;nofollow&quot;&gt;SORBS list blocking gmail as well&lt;/a&gt;. That&#039;s when I am trying to send email to others from my gmail a/c. The full error message is like:

PERM_FAILURE: SMTP Error (state 9): 554 5.7.1 Service unavailable; Client host [66.249.92.171] blocked using dnsbl.sorbs.net; Spam Received Recently See: http://www.sorbs.net/lookup.shtml?66.249.92.171</description>
		<content:encoded><![CDATA[<p>Just FYI &#8212; I&#8217;ve had experience about <a href="http://www.au.sorbs.net/lookup.shtml?66.249.92.171l" rel="nofollow">SORBS list blocking gmail as well</a>. That&#8217;s when I am trying to send email to others from my gmail a/c. The full error message is like:</p>
<p>PERM_FAILURE: SMTP Error (state 9): 554 5.7.1 Service unavailable; Client host [66.249.92.171] blocked using dnsbl.sorbs.net; Spam Received Recently See: <a href="http://www.sorbs.net/lookup.shtml?66.249.92.171" rel="nofollow">http://www.sorbs.net/lookup.shtml?66.249.92.171</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Michael Fleming&#8217;s Networked Mind &#187; Blog Archive &#187; A word on DNS blacklists.</title>
		<link>http://tieguy.org/blog/2007/04/09/note-to-anyone-who-runs-their-own-mail-server/comment-page-1/#comment-14292</link>
		<dc:creator>Michael Fleming&#8217;s Networked Mind &#187; Blog Archive &#187; A word on DNS blacklists.</dc:creator>
		<pubDate>Wed, 11 Apr 2007 11:41:23 +0000</pubDate>
		<guid isPermaLink="false">http://tieguy.org/blog/2007/04/09/note-to-anyone-who-runs-their-own-mail-server/#comment-14292</guid>
		<description>[...] (&#8221;DNSBLs&#8221;) among some members of the Internet community (pro-DNSBL here and slightly con here for [...]</description>
		<content:encoded><![CDATA[<p>[...] (&#8221;DNSBLs&#8221;) among some members of the Internet community (pro-DNSBL here and slightly con here for [...]</p>
]]></content:encoded>
	</item>
</channel>
</rss>

