News for hackers. Stuff that matters.
Re:Most of the Amazon SES IP blacklisted by SpamCannibal by austerity on Monday April 21, 2014 @10:27AM (#7621178)
IP blacklists are a waste of everyone's time.
Re:Most of the Amazon SES IP blacklisted by SpamCannibal by lazyant on Monday April 21, 2014 @10:35AM (#7621216)
Not my time and my clients'.

By appending in the Posfix configuration file line smtpd_recipient_restrictions = ... spamcop and spamhaus , spam decreases in like 95% without even touching your server further (spamassassin I'm looking at you).

I you add greylisting you get rid virtually of all of spam.

Re:Most of the Amazon SES IP blacklisted by SpamCannibal by eli on Monday April 21, 2014 @10:51AM (#7621297)
How much good mail gets mistakenly canned? I'd rather sift through a little spam than lose something I wanted.
Re:Most of the Amazon SES IP blacklisted by SpamCannibal by ScottWhigham on Monday April 21, 2014 @11:28AM (#7621521)
I think we'd all rather "sift through a little spam than lose something I wanted" but my guess is that you've never run an email server. "a little spam" is not what you will get - it will be orders of magnitude more spam than legit emails. This is hard stuff - Gmail, supposedly one of the best, catches between 2 and 10 emails a day in my "Spam" folder that aren't actually spam. If I were to turn off the spam filter (if you could) in Gmail, I'd get 2,000 emails a day - of which 50 would be legit.
Re:Most of the Amazon SES IP blacklisted by SpamCannibal by eli on Monday April 21, 2014 @12:05PM (#7621732)
I actually have run a mail server before, and now I gladly pay someone else to do it for me :)

Point taken, but I've been on the receiving end of what I would consider false-positive blocks by Spamhaus & co. They sometimes have policies about what's considered spam that I don't think all their end users would agree with. I've been blocked for having an IP address on the same provider as someone else who allegedly advertised their website via spam. If you're running a mailing list, dealing with the anti-spam stuff is at least as big a problem as the spam it was supposed to solve.

Re:Most of the Amazon SES IP blacklisted by SpamCannibal by lazyant on Monday April 21, 2014 @11:06AM (#7621397)
Then use greylisting only.

I've never had a case of a false positive complain but yes, they can happen and I don't terribly mind because that means the sender's mail server is blacklisted and they should know.

Also in any case my recommendation is to use a 3rd party mail service, for deliverability reasons mostly.

Re:Most of the Amazon SES IP blacklisted by SpamCannibal by wpietri on Monday April 21, 2014 @11:38AM (#7621582)
Currently, I get a couple thousand spam messages a day, maybe 5 of wihch make it to my inbox. I haven't had a false positive in years. But if I did, I would be ok with not having to manually evaluate 50 pieces of junk for every real message I receive.
Re:Most of the Amazon SES IP blacklisted by SpamCannibal by claudius on Monday April 21, 2014 @11:11AM (#7621423)
> I you add greylisting you get rid virtually of all of spam.

I don’t really like greylisting, as it takes longer for email to get through. What did help without any perceivable loss whatsoever is being extensively strict about SMTP specifications (e.g. proper hostnames in EHLO) and things like PTR records. I really like watching these ‘5xx: Client <something> rejected’ flying by in my mail.info :)

Re:Most of the Amazon SES IP blacklisted by SpamCannibal by giulianob on Monday April 21, 2014 @10:40AM (#7621231)
Yes but if everyone using SES is getting blacklisted then you will also have a lot of legit emails being blocked.
Re:Most of the Amazon SES IP blacklisted by SpamCannibal by lazyant on Monday April 21, 2014 @10:50AM (#7621281)
Correct, and the onus is on Amazon to tighten up and crack down on abusers.
Re:Most of the Amazon SES IP blacklisted by SpamCannibal by dataminded on Monday April 21, 2014 @10:51AM (#7621291)
Or Amazon might take a closer look at who is using SES and clean up the system.

I'm all for cleaning up email.

Re:Most of the Amazon SES IP blacklisted by SpamCannibal by mike-cardwell on Monday April 21, 2014 @10:29AM (#7621196)
IP blacklists are the reason Email still works.
Re:Most of the Amazon SES IP blacklisted by SpamCannibal by __david__ on Monday April 21, 2014 @05:03PM (#7623857)
For lazy sysadmins, maybe. I don't use any blacklists, only spamassassin and the spam for me and my users is perfectly manageable.
Re:Most of the Amazon SES IP blacklisted by SpamCannibal by mike-cardwell on Tuesday April 22, 2014 @07:46AM (#7627052)
Hate to break it to you, but SpamAssassin uses blacklists.
Re:Most of the Amazon SES IP blacklisted by SpamCannibal by __david__ on Thursday April 24, 2014 @04:29PM (#7642762)
It doesn't use them to insta-spam an email, which I think is where blacklists go wrong. It gives spam points to the message if the sender is on the lists, which turns them from "blacklists" into "suspicious lists".

If an otherwise normal email happens to come from a blacklisted computer, it'll still have a chance to get through, which is the correct thing to do, in my opinion.

I still believe that everyone has the right to run their own SMTP server, and I dislike that so many places blacklist someone just because they are on a cable modem.

Re:Most of the Amazon SES IP blacklisted by SpamCannibal by ScottWhigham on Monday April 21, 2014 @10:55AM (#7621316)
This sort of vague comment with no substance is just opinion stated as fact. If you have more information - hell, even a more expressed opinion, I'd be interested. As expressed, however, it's a garbage comment that waste's everyone's time. Why bother?
Re:Most of the Amazon SES IP blacklisted by SpamCannibal by pconf on Monday April 21, 2014 @11:06AM (#7621395)
>This sort of vague comment

Not sure about "vague comment"s but anyone who has run an email server, used an rbl/rhsbl, and followed the logs <http://www.postconf.com/docs/spamrep/> would say the same. Having done so for years and run reports on dozens of servers daily it is clear that blacklists are the most effective form of spam blocking, by at least an order of magnitude.

Re:Most of the Amazon SES IP blacklisted by SpamCannibal by ScottWhigham on Monday April 21, 2014 @11:26AM (#7621512)
I can't tell whether you agree with the OP or with my comment. Your first sentence argues that OP is right - "IP blacklists are a waste of everyone's time". Your second sentence though is "it is clear that blacklists are the most effective form of spam blocking, by at least an order of magnitude." Maybe a typo in your reply?
Re:Most of the Amazon SES IP blacklisted by SpamCannibal by pconf on Monday April 21, 2014 @11:51AM (#7621661)
> Maybe a typo

Could be a bug in your web browser. The first sentence is a quote as indicated by the ">" character at the beginning of the line.

Re:Most of the Amazon SES IP blacklisted by SpamCannibal by ScottWhigham on Monday April 21, 2014 @11:55AM (#7621682)
Could be a bug in your web browser.

I got that part, I'm talking about your first sentence.

... anyone who has run an email server... would say the same.

This reads as though you agree that "IP blacklists are a waste of everyone's time" as OP said. And maybe you do (and that's fine) - I'm just unclear given your second sentence.

Re:Most of the Amazon SES IP blacklisted by SpamCannibal by fixermark on Monday April 21, 2014 @10:30AM (#7621202)
Possibly, but if Amazon isn't doing enough to secure SES against abuse by spammers(1), it's not unfair for entities intended to guard against spam to treat it as a spam source. This is one of the risks of letting third-parties run software on one's systems.

(1) keeping in mind that the definitions of "spam" can be quite subjective

Re:Most of the Amazon SES IP blacklisted by SpamCannibal by cpncrunch on Monday April 21, 2014 @11:50AM (#7621655)
Amazon SES definitely does have a spam problem, and the issue is that they don't bother doing anything about abuse reports. I've reported a spammer (who scraped our email address) to them, but the spams kept coming. Other people have reported the same thing.

If you're running a bulk mailing server you simply must respond to abuse reports, otherwise your service will get blacklisted and be essentially useless. Other providers such as mailchimp are much more proactive about getting rid of spammers.