everybody hates spam on the dev.SW list

[Wim Lewis]

On Jun 30, 2006, at 12:59 PM, Sheldon T. Hall wrote:
> Of course, nothing past here is trustworthy, but I've seen quite a  
> number of
> spams to the list that have been presented by  
> shoveler.freenetworks.org.

Ken points out, shoveler is a valid MX for sw.n. Looking at the last  
few spams I've received, all of which came through the dev list here,  
shoveler seems to be accepting them from a variety of hosts:

Received: from par-ifnmbcftzfk (unknown [201.41.198.31])
Received: from xp-0hz97nklwcsj (unknown [201.19.250.15])
Received: from Gerencia (113-75-74.adsl.cust.tie.cl [200.113.75.74])
Received: from kailiao (host-24-149-166-208.patmedia.net  
[24.149.166.208])   [not via shoveler]
Received: from equipo-6 (red-corp-201.143.102.1.telnor.net  
[201.143.102.1])

My suggestion to the admins is to use graylistng on shoveler (and any  
other MXs). I see shoveler is running postfix; I use postgrey with  
postfix. It has very low collateral damage, it's easy to run, and it  
appears to be pretty effective in practice. (It wouldn't be too  
difficult for a spammer to work around, but few have done so, yet.)