#greytrapping hashtag - Bluesky

@pitrh.mastodon.social.ap.brid.gy

1 month ago

I added a few more translations of the phrase "This is trash" to the spamtraps at https://nxdomain.no/~peter/traplist.shtml (see https://nxdomain.no/~peter/the_rest_is_trash.html or bsdly.blogspot.com/2026/02/the-rest-is-tras...

If you want further translations added, please let me […]

0 0 0 0

Peter N. M. Hansteen (@pitrh@mastodon.social)

@pitrh.bsky.social

1 month ago

The Rest Is Trash

"The Rest Is Trash"
We are now halfway through the nineteenth year of greytrapping, still tracking and collecting from the wealth of imbecility out there
nxdomain.no/~peter/the_r... bsdly.blogspot.com/2026/02/the-... #spamd #greytrapping #greylisting #openbsd #freebsd #spam #antispam #cybercrime

1 0 0 0

Peter N. M. Hansteen

@pitrh.mastodon.social.ap.brid.gy

1 month ago

Original post on mastodon.social

"The Rest Is Trash"

We are now halfway through the nineteenth year of greytrapping, still tracking and collecting from the wealth of imbecility out there

https://nxdomain.no/~peter/the_rest_is_trash.html (tracked bsdly.blogspot.com/2026/02/the-rest-is-tras... #spamd #greytrapping […]

0 1 0 0

Peter N. M. Hansteen (@pitrh@mastodon.social)

@pitrh.bsky.social

2 months ago

The Rest Is Trash

Reprising for the midweek crowd:

The Rest Is Trash nxdomain.no/~peter/the_r... (tracked bsdly.blogspot.com/2026/02/the-...) following up on #greytrapping, updating the 18 years piece nxdomain.no/~peter/eight... #openbsd #spamd #greytrappng #greylisting #antispam #cybercrime #networking #spam

1 0 0 0

Peter N. M. Hansteen (@pitrh@mastodon.social)

@pitrh.bsky.social

2 months ago

The Rest Is Trash

The Rest Is Trash nxdomain.no/~peter/the_r... (tracked bsdly.blogspot.com/2026/02/the-...) following up on #greytrapping, updating the 18 years piece nxdomain.no/~peter/eight... #openbsd #spamd #greytrappng #greylisting #antispam #cybercrime #networking # spam

1 0 0 0

Peter N. M. Hansteen

@pitrh.mastodon.social.ap.brid.gy

2 months ago

Original post on mastodon.social

The Rest Is Trash https://nxdomain.no/~peter/the_rest_is_trash.html (tracked bsdly.blogspot.com/2026/02/the-rest-is-tras... following up on #greytrapping, updating the 18 years piece nxdomain.no/~peter/eighteen_years_of... #openbsd #spamd #greytrappng […]

0 1 0 0

Peter N. M. Hansteen (@pitrh@mastodon.social)

@pitrh.bsky.social

2 months ago

Greytrapping for years FreeBSD's Future, 18 years of greytrapping, PF vs Linux firewalls, and more.

I was pleasantly surprised to hear that the latest BSDnow www.bsdnow.tv/648 features my "Eighteen years of greytrapping ..." nxdomain.no/~peter/eight... as well as the BSDCan www.bsdcan.org/2026/ organizer interview #bsdcan #bsdnow #freebsd #openbsd #greytrapping

3 1 0 0

Peter N. M. Hansteen (@pitrh@mastodon.social)

@pitrh.bsky.social

2 months ago

DragonFly BSD Digest – A running description of activity related to DragonFly BSD.

The latest "Lazy reading" by Dragonfly Digest www.dragonflydigest.com has "Eighteen years of Greytrapping" nxdomain.no/~peter/eight... featured. (Later this year it wil be nineteen years :) and updates will come) #spamd #spam #openbsd #antispam #greytrapping #greylisting #cybercrime

4 0 0 0

Peter N. M. Hansteen (@pitrh@mastodon.social)

@pitrh.bsky.social

2 months ago

A Major Mail Provider Demonstrate They Likely Do Not Understand Mail At All

A Major Mail Provider Demonstrate They Likely Do Not Understand Mail At All nxdomain.no/~peter/they_... (tracked bsdly.blogspot.com/2026/01/a-ma...)

#greytrapping #spam, #antispam #greylisting #blocklist, #openbsd #freebsd #smtp #email #SMTP, #contentfiltering #SPF #DMARC #security #networking

3 0 0 0

Peter N. M. Hansteen

@pitrh.mastodon.social.ap.brid.gy

2 months ago

Original post on mastodon.social

A Major Mail Provider Demonstrate They Likely Do Not Understand Mail At All nxdomain.no/~peter/they_do_not_under... (tracked bsdly.blogspot.com/2026/01/a-major-mail-pro...

#greytrapping #spam, #antispam #greylisting #blocklist […]

0 2 1 0

Peter N. M. Hansteen (@pitrh@mastodon.social)

@pitrh.bsky.social

3 months ago

Why 451 is Good for You - Greylisting Perspectives From the Early Noughties

Heh. Looks like Why 451 is Good for You - Greylisting Perspectives From the Early Noughties nxdomain.no/~peter/why_4... (tracked bsdly.blogspot.com/2025/12/why-...) hit hackernews: news.ycombinator.com/item?id=4641...

#greylisting #greytrapping #spam #spamtrapping #antispam #spamd #openbsd #smtp

1 0 1 0

Peter N. M. Hansteen (@pitrh@mastodon.social)

@pitrh.bsky.social

3 months ago

Eighteen Years of Greytrapping - Is the Weirdness Finally Paying Off?

The update you have been waiting for:

"Eighteen Years of Greytrapping - Is the Weirdness Finally Paying Off?" nxdomain.no/~peter/eight... (tracked bsdly.blogspot.com/2025/08/eigh...)

now has the complete 2025 data. #openbsd #spamd #greytrapping #spam #antispam #cybercrime #spamtraps #blocklists

2 1 0 0

Peter N. M. Hansteen (@pitrh@mastodon.social)

@pitrh.bsky.social

3 months ago

Why 451 is Good for You - Greylisting Perspectives From the Early Noughties

Why 451 is Good for You - Greylisting Perspectives From the Early Noughties nxdomain.no/~peter/why_4... (tracked bsdly.blogspot.com/2025/12/why-...) @nostarch #greytrapping #greylisting #smtp #email #spam #antispam #bookofpf

1 0 0 0

Peter N. M. Hansteen

@pitrh.mastodon.social.ap.brid.gy

3 months ago

Why 451 is Good for You - Greylisting Perspectives From the Early Noughties © 2025 Peter N. M. Hansteen _A software vendor was using SMTP spamware to send license keys customers had paid thousands for. A measured rant was in order, and turned out to be quite enlightening._ While looking thrugh directories of old material, I stumbled upon what was most likely the main part of a complaint sent to a software vendor for failing to deliver a license key file the company I worked for then had paid some thousands of dollars for. The file as I found it was dated August 2010, but was likely a preserved copy of a draft that was written some time before the first edition of _The Book of PF_ (now in its _fourth edition_) was published, in response to the non-delivery incident. A quick investigation had me conclude from my `spamd` logs that their side did not play well with _greylisting_. * * * **Note:** This piece is also available _without_ trackers but _classic_ formatting only here. * * * I have revisited the _handling sites that do not play well with greylisting_ theme a number of times, such as the 2018 piece _Goodness, Enumerated by Robots. Or, Handling Those Who Do Not Play Well With Greylisting_ (also _here_). But I found these early notes interesting enough that I include them here, with only minor redactions to protect the (relatively) innocent: ` SWCrafters' reaction to finding out that their messages do not get through, essentially blaming "inaccurate spam filtering" was not unexpected, but I will take the opportunity to explain a few things about how Internet email works and how this makes their position at odds with reality. Even though Internet services are offered with no guarantees, usually described as 'best effort' services, a significant amount of effort has been put into making essential services such as SMTP email transmission fault tolerant, making the 'best effort' one with as close as does not matter to having a perfect record for delivering messages. The EXECUTIVE SUMMARY of this message is that the matter which trips up the delivery of SWCrafters' license-carrying emails is the fact that their email sending software's best effort at delivery falls significantly short of what current Internet standards require. The current standard for Internet email transmission is defined in RFC2821, which in section 4.5.4.1, "Sending Strategy", states > "In a typical system, the program that composes a message has some method for requesting immediate attention for a new piece of outgoing mail, while mail that cannot be transmitted immediately MUST be queued and periodically retried by the sender." and > "The sender MUST delay retrying a particular destination after one attempt has failed. In general, the retry interval SHOULD be at least 30 minutes; however, more sophisticated and variable strategies will be beneficial when the SMTP client can determine the reason for non-delivery." Contrast this with the application which sends the SWCrafters license information messages, which according to the data I have avaliable opens two SMTP sessions within a second of each other (the time resolution I have in my logs at the moment), apparently discarding the message without delivery afterwards. RFC2821 goes on to state that > "Retries continue until the message is transmitted or the sender gives up; the give-up time generally needs to be at least 4-5 days." After all, delivering email is a collaborative, best effort thing, and he RFC states clearly that if the site you are trying to send mail to reports it can't receive anything at the moment, it is your DUTY (a MUST requirement) to try again later, after an interval which is long enough that your unfortunate communication partner has had a chance to clear up whatever was the problem. A sending strategy which relies on every receiver to be receptive at all times, discarding undelivered messages after only one unsuccessful attempt, possibly makes sense if the data you are sending is unimportant or if your intended targets are unlikely read or even want to receive the messages you send. If on the other hand the data you are sending matter to either you or the intended recipient, it is in everybody's interest that you use the fault tolerance features which a compliant SMTP mail system offers. To put this in context, you need to remember that the SWCrafters license messages are the result of some SWCrafters customer ordering at least a thousand dollars' worth or software licenses, with no real upper limit on the dollar value of a single message. The system used to send these messages apparently does not understand SMTP status messages, discarding undelivered messages without a trace. Essentially, the system you are using treats the data your customers expect to receive in exchange for thousands of dollars paid as discardable. The "greylisting" technique which is in use at justgottahave.faith and other sites means that our systems expect any SMTP sender to understand SMTP status codes and to respect "451 temporary error please try again later" messages. The hows and whys are detailed at https://www.greylisting.org/, with a tutorial which contains a 'close enough' description of how it's done at datadok to be found at https://home.nuug.no/~peter/pf/, with the particulars starting at https://home.nuug.no/~peter/pf/en/spamd.html. We do content filtering as well, but this particular application never managed to get its data sent far enough to encounter content filtering until its IP address got whitelisted (listed as 'known good', or if you will, not having to conform to normal criteria). Greylisting works extremely well, and since it is both standards compliant (essentially insisting on compliance) and simple to implement you should expect it to be deployed at the next site you are trying to send email to. ` If I remember correctly, the other side found a way to send the missing license codes with something that _did_ handle SMTP status codes correctly a short time after the mail that included some version of these notes was sent. I had originally intended to make the URLs in the text here clickable, but changed my mind when I discovered that the current operators of `greylisting.org` have decided that a _large language model_ (the current iteration of what passes for _artificial intelligence_ needed to be included in the processing. That will perhaps serve as a sign that the world does move on, if not necessarily in useful directions at all times. If you want to explore the ins and outs of greylisting and the related phenomenon _greytrapping_ , my recent piece _Eighteen Years of Greytrapping - Is the Weirdness Finally Paying Off?_ (also _here_) is a way to start. For the greylisting part, the notes above capture the main points. * * * _Why 451 is Good for You - Greylisting Perspectives From the Early Noughties_ is © 2025 Peter N. M. Hansteen (published 2025-12-28) * * * You might also be interested in reading selected pieces via _That Grumpy BSD Guy: A Short Reading List_ (also _here_). Separately, pre-orders of _The Book of PF, 4th edition_ are now open. For a little background, see the blog post _Yes, The Book of PF, 4th Edition Is Coming Soon_ (also _here_). The latest information I have is that physical copies should be ready to ship by the end of January 2026. * * *

Why 451 is Good for You - Greylisting Perspectives From the Early Noughties https://nxdomain.no/~peter/why_451_is_good.html (tracked bsdly.blogspot.com/2025/12/why-451-is-good-... @nostarch #greytrapping #greylisting #smtp #email #spam #antispam #bookofpf

0 0 0 0

Peter N. M. Hansteen (@pitrh@mastodon.social)

@pitrh.bsky.social

3 months ago

Eighteen Years of Greytrapping - Is the Weirdness Finally Paying Off?

Possibly not blogworthy, but: One puzzling side effect of running greytrapping (as in nxdomain.no/~peter/eight...) is seeing password guessers using obviously generated gibberish local parts (see nxdomain.no/~peter/shoul...). #greytrapping #passwordguessing #passwordgroping #spamd #ssh #pop3gropers

1 0 0 0

Peter N. M. Hansteen

@pitrh.mastodon.social.ap.brid.gy

6 months ago

Original post on mastodon.social

Hm. log entries like

Sep 30 00:54:41 skapet spamd[83364]: (GREY) 171.4.7.241: <maillist@mailserver.com> -> <somethingreallystupid@bsdly.net>
Sep 30 00:54:41 skapet spamd[83004]: new entry 171.4.7.241 from <maillist@mailserver.com> to <somethingreallystupid@bsdly.net>, helo […]

0 0 0 0

Peter N. M. Hansteen

@pitrh.mastodon.social.ap.brid.gy

6 months ago

Eighteen Years of Greytrapping - Is the Weirdness Finally Paying Off?

And yes of course, that became a fresh spamtrap, number 8205067 or thereabouts. see the old favorite nxdomain.no/~peter/eighteen_years_of... #greytrapping #openbsd #spamd #cybercrime

0 1 0 0

Peter N. M. Hansteen (@pitrh@mastodon.social)

@pitrh.bsky.social

6 months ago

Now 8024921 imaginary friends (and counting), at nxdomain.no/~peter/trapl..., mainly exumed from logs.

For the bored but not restless, nxdomain.no/~peter/eight... (also bsdly.blogspot.com/2025/08/eigh...) #greytrapping #spamtraps #spamd #openbsd #spam #cybercrime

0 0 0 0

Peter N. M. Hansteen

@pitrh.mastodon.social.ap.brid.gy

6 months ago

Original post on mastodon.social

Now 8024921 imaginary friends (and counting), at https://nxdomain.no/~peter/traplist.shtml mainly exumed from logs.

For the bored but not restless, nxdomain.no/~peter/eighteen_years_of... (also bsdly.blogspot.com/2025/08/eighteen-years-o... […]

0 0 0 0

Peter N. M. Hansteen

@pitrh.mastodon.social.ap.brid.gy

6 months ago

Original post on mastodon.social

Have you been wondering why the list of imaginary friends at https://nxdomain.no/~peter/traplist.shtml has been expanding quicker than usual this week?

It's because I found another batch of old logs that are now getting the more thorough treatment (also see […]

0 1 0 0

Peter N. M. Hansteen (@pitrh@mastodon.social)

@pitrh.bsky.social

7 months ago

It seems that adding the second, third and fourth entries in raw list at nxdomain.no/~peter/trapl... has not dissuaded any consumers of that list.

Don't they read their data at all?

Background nxdomain.no/~peter/eight... (also bsdly.blogspot.com/2025/08/eigh...) #greytrapping #spam #cybercrime

0 0 0 0

Peter N. M. Hansteen

@pitrh.mastodon.social.ap.brid.gy

7 months ago

Original post on mastodon.social

It seems that adding the second, third and fourth entries in raw list at https://nxdomain.no/~peter/traplist.shtml has not dissuaded any consumers of that list.

Perhaps they don't read their data at all?

Background nxdomain.no/~peter/eighteen_years_of... (also […]

0 0 0 0

Peter N. M. Hansteen (@pitrh@mastodon.social)

@pitrh.bsky.social

7 months ago

Oh, the number of bsdly imaginary friends just rolled past 6 million, nxdomain.no/~peter/trapl... (background nxdomain.no/~peter/eight... or tracked bsdly.blogspot.com/2025/08/eigh...), may update graphs at month end #openbsd #spamd #greytrapping #antispam #cybercrime #nastykidsister

0 0 0 0

Peter N. M. Hansteen

@pitrh.mastodon.social.ap.brid.gy

7 months ago

Original post on mastodon.social

Oh, the number of bsdly imaginary friends just rolled past 6 million, https://nxdomain.no/~peter/traplist.shtml (background nxdomain.no/~peter/eighteen_years_of... or tracked bsdly.blogspot.com/2025/08/eighteen-years-o... may update graphs at […]

0 1 0 0

Peter N. M. Hansteen (@pitrh@mastodon.social)

@pitrh.bsky.social

7 months ago

Eighteen Years of Greytrapping - Is the Weirdness Finally Paying Off?

Hm. Publishing "Eighteen years of greytrapping ..." retrospective nxdomain.no/~peter/eight... (bsdly.blogspot.com/2025/08/eigh...) has led to an uptick in digital archaeology. People are fetching the archived lists! #greytrapping #spamd #openbsd #pf #packetfiltering #antispam #cybercrime #security

2 0 0 0

Peter N. M. Hansteen

@pitrh.mastodon.social.ap.brid.gy

7 months ago

Original post on mastodon.social

Hm. It looks like my publishing the "Eighteen years of greytrapping ..." retrospective nxdomain.no/~peter/eighteen_years_of... (bsdly.blogspot.com/2025/08/eighteen-years-o... has generated an uptick in digital archaelogy. People are fetching the […]

0 0 0 0

Peter N. M. Hansteen (@pitrh@mastodon.social)

@pitrh.bsky.social

7 months ago

Eighteen Years of Greytrapping - Is the Weirdness Finally Paying Off? © 2025 Peter N. M. Hansteen With the imaginary friends , also known as spamtraps , now more numerous than the inhabitants of their vir...

Hey! My "Eighteen Years of Greytrapping - Is the Weirdness Finally Paying Off?" bsdly.blogspot.com/2025/08/eigh... (nxdomain.no/~peter/eight...) is on @vermaden's Valuable news vermaden.wordpress.com/2025/08/18/v... #openbsd #spamd #greytrapping #freebsd #valueablenews

2 0 0 0

Peter N. M. Hansteen

@pitrh.mastodon.social.ap.brid.gy

7 months ago

Original post on mastodon.social

Hey! My "Eighteen Years of Greytrapping - Is the Weirdness Finally Paying Off?" bsdly.blogspot.com/2025/08/eighteen-years-o... (nxdomain.no/~peter/eighteen_years_of... is on @vermaden's Valuable news […]

0 0 0 0

Peter N. M. Hansteen

@pitrh.mastodon.social.ap.brid.gy

7 months ago

Original post on mastodon.social

Aug 17 09:38:58 skapet spamd[36107]: (GREY) 141.98.10.53: <test@bsdly.net> -> <glinksbiz2025@hotmail.com>
Aug 17 09:38:58 skapet spamd[30363]: Trapping 141.98.10.53 for tuple 141.98.10.53 host-141-98-10-.domain <test@bsdly.net> <glinksbiz2025@hotmail.com>
Aug 17 09:38:58 skapet spamd[30363]: new […]

0 0 0 0

Peter N. M. Hansteen (@pitrh@mastodon.social)

@pitrh.bsky.social

7 months ago

Eighteen Years of Greytrapping - Is the Weirdness Finally Paying Off?

It's heartwarming to a greying geek that a 5000+ words retrospective on greytrapping is popular - nxdomain.no/~peter/eight... (tracked bsdly.blogspot.com/2025/08/eigh...)

#greytrapping #spam #antispam #greylisting #blocklist #openbsd #freebsd #smtp #email #pop3 #security #networking #cybercrime

1 0 0 0