回复：[转发：论坛电子邮件通知、PBL 黑名单及维基注册]
首次公开证据
打开首次公开证据查看 1 个交叉存档
来源说明
Published on GitHub in February 2024 as part of Martti Malmi's testimony in the COPA v. Wright trial
对，忘了这件事。
希望 theymos 说得没错，问题的根源就是 PBL。
是的，它们仍处于禁用状态。禁止访问邮件服务器 很容易，但我们可能还是想保留通过电子邮件找回密码的功能。
私信通知仍处于禁用状态吗？（我们真正需要做的只是禁止 论坛访问邮件服务器）
现在能正常工作了吗？我之前修改了一些论坛代码来 禁用私信电子邮件通知，但刚刚又撤销了其中大部分，因为没有必要。
我向 PBL 提交了移除请求。
FAQ 中说：“首先要知道的是：PBL 不是 黑名单。你被列入其中，不是因为发送垃圾邮件，也不是因为你做过 什么。PBL 只是一份涵盖全球所有动态 IP 地址空间的列表，即通常分配给 ISP 宽带客户的 IP 地址段 （DSL、DHCP、PPP、有线网络、拨号上网）。动态 IP 地址被列入 PBL 完全正常。事实上，全球所有动态 IP 地址都应该列入 PBL。甚至不发送邮件的静态 IP 也应该列入 PBL。”所以，我们甚至不需要为了登上这个列表而允许 垃圾邮件。
这里再次附上有关 PBL 的信息。
-------- 原始邮件 -------- 主题：论坛电子邮件通知、PBL 黑名单及 wiki 注册 日期：Thu, 29 Jul 2010 03:18:56 +0100 发件人：Satoshi Nakamoto satoshin@gmx.com 收件人：Martti Malmi mmalmi@cc.hut.fi
http://www.bitcoin.org/smf/index.php?topic=338.0
属于电子邮件黑洞名单，或者至少是托管注册所用 电子邮件服务器的 ISP 在其中一个名单上。
“看起来 bitcoin.org 被列入了 PBL。” http://www.spamhaus.org/pbl/query/PBL340779
我认为，我们的问题可能在于启用了论坛通知，比如 收到私信时向你发送电子邮件，但我们没有对新账户进行 电子邮件验证。会不会有人未经验证就填入别人的电子邮件地址， 然后让系统把东西发送到那里？我们需要立刻制止这种情况， 免得它被用于做坏事。要么禁止所有通知， 要么确保电子邮件地址经过验证。
我更倾向于禁止通知，或任何由论坛 向你发送电子邮件的功能。我有点喜欢不要求电子邮件验证。但 如果这是确保我们不向未经验证的 地址发送电子邮件的唯一办法，那么也可以这样做。
如果我们请求从 PBL 中移除，最好先确保 问题已经得到妥善处理。
我把 Registration->settings->registration of new members 改成了 “Member Activation”。我认为这表示会进行电子邮件验证。 “Member Activation 启用此选项后，任何注册论坛的成员都会 通过电子邮件收到一个激活链接，他们必须先点击该链接， 才能成为正式成员”
我认为，这是确保论坛不会被用来向 别人的电子邮件地址发送邮件并可能被用于发送垃圾邮件的 唯一办法。
英文原文
展开英文原文
Right, forgot about that.
Hopefully theymos was right that the PBL is the source of the problem.
Yes, they're still disabled. Disabling the access to the mail server would be easy, but we probably want to keep the password recovery by email.
Are PM notifications still disabled? (All we really need is disable the forum's access to the mail server)
Does it work correctly now? I had made some forum code changes to disable PM email notification, but just reverted most of them as unnecessary.
I sent a removal request to PBL.
The FAQ says: "The first thing to know is: THE PBL IS NOT A BLACKLIST. You are not listed for spamming or for anything you have done. The PBL is simply a list of all of the world's dynamic IP space, i.e: IP ranges normally assigned to ISP broadband customers (DSL, DHCP, PPP, cable, dialup). It is perfectly normal for dynamic IP addresses to be listed on the PBL. In fact all dynamic IP addresses in the world should be on the PBL. Even static IPs which do not send mail should be listed in the PBL." So we didn't even need to allow spam to be on the list.
Here's the info about PBL again.
-------- Original Message -------- Subject: Forum e-mail notifications and PBL blacklist and wiki registration Date: Thu, 29 Jul 2010 03:18:56 +0100 From: Satoshi Nakamoto satoshin@gmx.com To: Martti Malmi mmalmi@cc.hut.fi
http://www.bitcoin.org/smf/index.php?topic=338.0
of e-mail blackhole list or at least the ISP that hosts the e-mail server for registration is on one of those lists.
"Looks like bitcoin.org is listed on the PBL." http://www.spamhaus.org/pbl/query/PBL340779
I think our problem may be that we have forum notifications on, like e-mail you when you receive a PM, but we don't have e-mail verification of new accounts. Can someone put someone else's e-mail address without verifying it, then have stuff sent there? We need to stop that right away before it gets used for something bad. Either disallow all notification, or make sure e-mail addresses are verified.
I'm more inclined to disallow notifications or anything where the forum sends you e-mail. I kinda like not requiring e-mail verification. But if that's the only way to make sure we don't send e-mails to un-verified addresses, then we could do that.
If we request to get off of PBL, we'd better make sure we've got the problem secured first.
I changed Registration->settings->registration of new members to "Member Activation". I assume that means it e-mail verifies. "Member Activation When this option is enabled any members registering to the forum will have a activation link emailed to them which they must click before they can become full members"
I think that's the only way to make sure the forum can't be used to send to other people's e-mail addresses and potentially use it to spam.