이메일 #221 - #225

원본 출처: Satoshi - Sirius emails 2009-2011

이메일 #221

Date: Mon, 02 Aug 2010 21:56:06 +0100
From: Satoshi Nakamoto <[email protected]>
Subject: [Fwd: no activation mail]
To: Martti Malmi <[email protected]>

영어 원문

Oh great, now we're screwed.

We probably got spam blocked because we were allowing registrations 
without e-mail verification.  But now that we've enabled it, our 
verification e-mails are blocked.

There could still be some existing user accounts created before the 
registration requirement being used by spammers.

We're kind of in a jam here.  Can you make sure there's nothing else you 
can think of that might be acting as an open e-mail gateway or way for 
spammers to use our system for putting out spam?  Check the e-mail logs 
and see if there's been a lot of traffic and what it's from.  If you can 
figure out what the problem was and shut it down, then after you're sure 
it's fixed, request PBL to take us off the block list.

If there's a way to prohibit the forum from sending e-mail 
notifications, maybe we should do that.



-------- Original Message --------
Subject: no activation mail
Date: Mon, 02 Aug 2010 22:30:35 +0200
From: Youri <[email protected]>
To: [email protected]

Hey Satoshin,

I tried to register me at the bitcoinforum, but I didn't get an activation
mail.
Tried the resend activation code option a few times, changed the
mailadress from my telenet to my gmail and back, but no luck. Looked at my
spam folder but it's not there. So I guess something went wrong, could you
activate my account?

My username is Skull88.

Thanks in advance,
Youri

이메일 #222

Date: Mon, 02 Aug 2010 22:08:22 +0100
From: Satoshi Nakamoto <[email protected]>
Subject: Disabled some notifications
To: Martti Malmi <[email protected]>

영어 원문

For "normal members" I disabled "Request notification on replies" and 
"Request notification on new topics".

I'm pretty sure there's a notification option for when you receive PMs, 
but I don't see a way to disable it.  If we have to, I guess we could 
edit the php code.

이메일 #223

Date: Mon, 02 Aug 2010 22:09:20 +0100
From: Satoshi Nakamoto <[email protected]>
Subject: [Fwd: Forum e-mail notifications and PBL blacklist and wiki registration]
To: Martti Malmi <[email protected]>

영어 원문

Here's the info about PBL again.


-------- Original Message --------
Subject: Forum e-mail notifications and PBL blacklist and wiki registration
Date: Thu, 29 Jul 2010 03:18:56 +0100
From: Satoshi Nakamoto <[email protected]>
To: Martti Malmi <[email protected]>

http://www.bitcoin.org/smf/index.php?topic=338.0

> of e-mail blackhole list or at least the ISP that hosts the e-mail server for registration is on one of those lists.
> 
> "Looks like bitcoin.org is listed on the PBL."
> http://www.spamhaus.org/pbl/query/PBL340779

I think our problem may be that we have forum notifications on, like
e-mail you when you receive a PM, but we don't have e-mail verification
of new accounts.  Can someone put someone else's e-mail address without
verifying it, then have stuff sent there?  We need to stop that right
away before it gets used for something bad.  Either disallow all
notification, or make sure e-mail addresses are verified.

I'm more inclined to disallow notifications or anything where the forum
sends you e-mail.  I kinda like not requiring e-mail verification.  But
if that's the only way to make sure we don't send e-mails to un-verified
addresses, then we could do that.

If we request to get off of PBL, we'd better make sure we've got the
problem secured first.

I changed Registration->settings->registration of new members to "Member
Activation".  I assume that means it e-mail verifies.
"Member Activation
When this option is enabled any members registering to the forum will
have a activation link emailed to them which they must click before they
can become full members"

I think that's the only way to make sure the forum can't be used to send
to other people's e-mail addresses and potentially use it to spam.

이메일 #224

Date: Wed, 04 Aug 2010 00:37:13 +0300
From: [email protected]
To: Satoshi Nakamoto <[email protected]>
Subject: Re: [Fwd: no activation mail]

영어 원문

The logs don't tell very much, they just confirm that many servers  
reject the emails sent by our server. I can't think of anything other  
than pm notifications that could have caused the spam listing. I'll  
check if I can disable the notifications from the code.

We can allow registrations without email confirmation. It's no problem  
when we're already on the spam list and no problem after the  
notifications are disabled.

> Oh great, now we're screwed.
>
> We probably got spam blocked because we were allowing registrations
> without e-mail verification.  But now that we've enabled it, our
> verification e-mails are blocked.
>
> There could still be some existing user accounts created before the
> registration requirement being used by spammers.
>
> We're kind of in a jam here.  Can you make sure there's nothing else
> you can think of that might be acting as an open e-mail gateway or way
> for spammers to use our system for putting out spam?  Check the e-mail
> logs and see if there's been a lot of traffic and what it's from.  If
> you can figure out what the problem was and shut it down, then after
> you're sure it's fixed, request PBL to take us off the block list.
>
> If there's a way to prohibit the forum from sending e-mail
> notifications, maybe we should do that.
>
>
>
> -------- Original Message --------
> Subject: no activation mail
> Date: Mon, 02 Aug 2010 22:30:35 +0200
> From: Youri <[email protected]>
> To: [email protected]
>
> Hey Satoshin,
>
> I tried to register me at the bitcoinforum, but I didn't get an activation
> mail.
> Tried the resend activation code option a few times, changed the
> mailadress from my telenet to my gmail and back, but no luck. Looked at my
> spam folder but it's not there. So I guess something went wrong, could you
> activate my account?
>
> My username is Skull88.
>
> Thanks in advance,
> Youri

이메일 #225

Date: Thu, 05 Aug 2010 20:03:11 +0300
From: [email protected]
To: Satoshi Nakamoto <[email protected]>
Subject: Re: [Fwd: no activation mail]

영어 원문

I edited the forum code, it shouldn't send notifications anymore.

> Oh great, now we're screwed.
>
> We probably got spam blocked because we were allowing registrations
> without e-mail verification.  But now that we've enabled it, our
> verification e-mails are blocked.
>
> There could still be some existing user accounts created before the
> registration requirement being used by spammers.
>
> We're kind of in a jam here.  Can you make sure there's nothing else
> you can think of that might be acting as an open e-mail gateway or way
> for spammers to use our system for putting out spam?  Check the e-mail
> logs and see if there's been a lot of traffic and what it's from.  If
> you can figure out what the problem was and shut it down, then after
> you're sure it's fixed, request PBL to take us off the block list.
>
> If there's a way to prohibit the forum from sending e-mail
> notifications, maybe we should do that.
>
>
>
> -------- Original Message --------
> Subject: no activation mail
> Date: Mon, 02 Aug 2010 22:30:35 +0200
> From: Youri <[email protected]>
> To: [email protected]
>
> Hey Satoshin,
>
> I tried to register me at the bitcoinforum, but I didn't get an activation
> mail.
> Tried the resend activation code option a few times, changed the
> mailadress from my telenet to my gmail and back, but no luck. Looked at my
> spam folder but it's not there. So I guess something went wrong, could you
> activate my account?
>
> My username is Skull88.
>
> Thanks in advance,
> Youri