43 Folders

Back to Work

Merlin’s weekly podcast with Dan Benjamin. We talk about creativity, independence, and making things you love.

Join us via RSS, iTunes, or at 5by5.tv.

”What’s 43 Folders?”
43Folders.com is Merlin Mann’s website about finding the time and attention to do your best creative work.

Open thread: Favorite spam blocker service?

I've been relatively fortunate with filtering spam over the past couple years (knock on wood). But despite a kickass three-tiered system that includes the world-beating server-side Sieve, plus Mail.app's pretty good client filtering, it's inevitable that even my best-loved private email addresses would find their way into the wrong hands (it's why I recently created "ThanksNo.com" -- an experiment in social re-engineering that you are free to use as well).

So, now that the spelling-impaired Lords of The Dark Side have such renewed interest in my investment options and genital proportions, I'm considering joining a service like Spam Arrest or the apparently deceased Knowspam. I mostly plan to run this on the addresses I use for strictly personal stuff, so I'm satisfied I can start with a "whitelist" to ensure I don't generate loops or dead ends for the "good" senders. But, you tell me...

Apart from running smart filters on your server and in your mail client, what's the best way to protect a mydomain.com-type email address from becoming compromised and punked-out? What are the dangers and cons of using a challenge/response service like Spam Arrest? Apart from abandoning it wholesale, what's the most effective and non-annoying way to rehabilitate a compromised address?

TOPICS: Email, Vox Populi
Ramin's picture

I was an early user...

I was an early user of Knowspam until they expired then switched to SpamArrest. Here are a few observations:

  • Overall, server-side filtering works very well. I get 1-2 unwanted messages a month, and those are usually addresses spoofed from domains I've authorized.

  • As noted in a previous comment, the challenge/response model tells spammers that the account is active so the amount of crap heading your way increases dramatically. However, since it's all caught behind the trap, you don't care. I went from a few hundred spam messages per week before doing server-side filtering to what looks to average 2-5K per day. After a while, you just stop checking to see if any good messages are caught in the trap.

  • The biggest pain in using the system is when a) signing up for group mailing lists, b) creating an account on a service that takes its time sending out authorization messages, and c) shopping -- especially when it comes to receiving order confirmation/shipping messages.

Then again, these are infrequent enough activities not to be too painful. You can avoid the mailing list problem by signing up for a digest version and authorizing the digest sender address. The slow confirmation message you can't do anything about. I usually just go ahead and add the whole domain to the authorized sender list (which is how the 1-2 messages sneak through). The shopping problem requires checking the spam trap every once in a while and searching for the product you ordered. If you do a lot of online shopping, this may cause annoyance. I generally buy from a few well-known vendors so it's not that bad.

The best thing about server-side filters is that most of them let you point your outgoing SMTP server at them, so outbound email addresses automatically get added to the authorized list. If you're shopping around for server-side spam filters, this is a must have feature.

The biggest problem with using server-side filtering is if you are running a business and have generic open email addresses like 'info@domain.com.' You have to balance inconveniencing potential clients against the flood of crap that will inevitably come through. I've opted for closing things down. I figure if someone is that irritable and goes elsewhere because they are politely asked to respond to an email challenge, it' probably best if we don't work together ;-)

 
EXPLORE 43Folders THE GOOD STUFF

Popular
Today

Popular
Classics

An Oblique Strategy:
Honor thy error as a hidden intention


STAY IN THE LOOP:

Subscribe with Google Reader

Subscribe on Netvibes

Add to Technorati Favorites

Subscribe on Pageflakes

Add RSS feed

The Podcast Feed

Cranking

Merlin used to crank. He’s not cranking any more.

This is an essay about family, priorities, and Shakey’s Pizza, and it’s probably the best thing he’s written. »

Scared Shitless

Merlin’s scared. You’re scared. Everybody is scared.

This is the video of Merlin’s keynote at Webstock 2011. The one where he cried. You should watch it. »