Sun, 14 May 2006 08:14:21 +0100 from Roy Schestowitz
> __/ [ Stan Brown ] on Sunday 14 May 2006 00:26 \__
> > Fri, 12 May 2006 12:59:38 +0100 from Roy Schestowitz
> > <newsgroups@xxxxxxxxxxxxxxx>:
> >> Apache comes with a package/module called BoxTrapper which I have used
> >> happily (not necessarily to the happiness of others) for almost a year. It
> >> is of course free.
> > And worth less than it costs.
> > I know nothing about that particular package, but challenge-response
> > systems are not just a flawed implementation, they are a bad idea
> > from the get-go.
> > http://linuxmafia.com/faq/Mail/challenge-response.html
> I put SpamAssassin on top of BoxTrapper. This reduces the load, i.e.
> intercepts messages effectively /before/ a request for verification is
> sent. Moreover, I only enabled BoxTrappers on two accounts.
> As a side note, did you know that half of the global traffic of spam is
> estimated to have been sent from compromised Windows boxes? I find that
Neither of those comments has anything AT ALL to do with the inherent
brokenness of challenge-response schemes.
Stan Brown, Oak Road Systems, Tompkins County, New York, USA