News from ITCS: Winter Term 2007
Less Spam Thanks to New PenaltyBox
Many members of the U-M community will see a noticeable reduction in the amount of spam they receive beginning today thanks to a new anti-spam tool called "PenaltyBox." PenaltyBox was activated on the U-M mail gateway machines last night. Initial testing showed that PenaltyBox reduces spam by 50-90%, depending on the type and amount of spam each individual typically receives.
PenaltyBox checks mail sent from outside the University to uniqname@umich.edu and groupname@umich.edu addresses for two characteristics:
- Compliance with Internet and e-mail system best practices and protocols.
- Whether the connecting IP address (the address from which the mail is sent) is included on the Do Not Spam List and other such lists of known spammers.
PenaltyBox then causes a temporary delivery failure to be generated for mail that it considers questionable. PenaltyBox stores information about the mail, and, if delivery is retried, the mail is accepted. (See diagram showing what PenaltyBox does)
PenaltyBox takes advantage of the fact that spambots and compromised spam-sending machines seldom queue and resend mail that doesn't get through the first time. Legitimate Internet Service Providers, however, routinely queue and resend mail messages that encounter temporary delivery failures.
For technical details about PenaltyBox, see the PenaltyBox web page.
Please note that PenaltyBox only works on mail that enters the University through the mail gateway, that is, mail sent to addresses that end in "@umich.edu." It does not, for example, work on mail sent directly to addresses ending in "@engin.umich.edu," "@bf.umich.edu," "@med.umich.edu," and so on.
PenaltyBox works in concert with the other anti-spam services provided by ITCS to provide a comprehensive approach to fighting spam. A diagram showing where in the e-mail delivery process each of these services works is on the ITCS web site. (Comprehensive Anti-Spam Services diagram)
|
Return to Winter 2007 Headlines
