ORBS follow-up requirements ?

[Rik van Riel <riel@conectiva.com.br>]

Hi,

after seeing ORBS go down (temporarily?) I have come to the
conclusion that any possible ORBS follow-up project would
need to meet the following requirements:

1) humans should not be allowed to add database entries,
   only the automated tester should

2) the automated tester should only probe systems through
   which a spam has travelled and should NOT probe the same
   system more than eg. once every 30 days

3) the system should run with a minimum of human maintenance

4) people should be able to just bounce (or forward?) a spam
   message to a robot, which will test the sites that relayed
   the mail if one of the following requirements are met:
        4a) regular expressions show this is most likely a spam
        4b) human intervention marks the message a spam (and adds
            another regexp to the list used for 4a)

5) the system should be friendly to administrators of open
   relays, sending them a friendly note stating that "after
   a spam complaint, your mail server has been found vulnerable
   to abuse by spammers  <how to fix>  <why to fix>  <evidence>"

6) when an open relay is fixed, the admin of the open relay should
   be able to remove the server from the database within a few hours
   (explanation of this in the letter sent in 5) and on the website)

7) full disclosure on how the system works, what it is doing and
   how people can participate or use the system .. no sneaky manual
   blacklisting or dicksize wars


I'd like to hear comments on these ideas. Did I forget anything?
Did I think of anything which isn't practical or too controversial?

And yes, I'm seriously considering working on such a project ;)

regards,

Rik
--
Linux MM bugzilla: http://linux-mm.org/bugzilla.shtml

Virtual memory is like a game you can't win;
However, without VM there's truly nothing to lose...

		http://www.surriel.com/
http://www.conectiva.com/	http://distro.conectiva.com/

-
Spamfilter:    spam magnet and regexp collector / blocker
Archive:       http://mail.nl.linux.org/spamfilter/
Website:       http://spamfilter.nl.linux.org/