Sun, 14 May 2006 08:14:21 +0100 from Roy Schestowitz
<newsgroups@xxxxxxxxxxxxxxx>:
> __/ [ Stan Brown ] on Sunday 14 May 2006 00:26 \__
>
> > Fri, 12 May 2006 12:59:38 +0100 from Roy Schestowitz
> > <newsgroups@xxxxxxxxxxxxxxx>:
> >> Apache comes with a package/module called BoxTrapper which I have used
> >> happily (not necessarily to the happiness of others) for almost a year. It
> >> is of course free.
> >
> > And worth less than it costs.
> >
> > I know nothing about that particular package, but challenge-response
> > systems are not just a flawed implementation, they are a bad idea
> > from the get-go.
> >
> > http://linuxmafia.com/faq/Mail/challenge-response.html
>
> I put SpamAssassin on top of BoxTrapper. This reduces the load, i.e.
> intercepts messages effectively /before/ a request for verification is
> sent. Moreover, I only enabled BoxTrappers on two accounts.
>
> As a side note, did you know that half of the global traffic of spam is
> estimated to have been sent from compromised Windows boxes? I find that
> outrageous.
Neither of those comments has anything AT ALL to do with the inherent
brokenness of challenge-response schemes.
--
Stan Brown, Oak Road Systems, Tompkins County, New York, USA
http://OakRoadSystems.com/
|
|
