Crazy Days at Metropolitan State Hospital – The Intake Ward

Like most people subsisting on the lowest rung of the hospital ladder, I’d often try to pick up extra shifts in order to make more money. Interested people would head down to the assignment office, where they’d have lists of openings, and if you qualified, you could sign up and take the shift, subject to a few restrictions. You couldn’t take more than two extra in a row, that sort of thing. The choicest assignments went to those with seniority, preference was given to people actually assigned to the ward they were picking up an extra shift for, and so when I picked up extra shifts, they were often first or third shift on my own ward, or wards that were incredibly unpopular for some reason.

As it turns out, it may not have mattered whether I was given preferential treatment on my own ward; it was immensely unpopular due to the higher-than-usual number of violent patients. So I was pretty surprised when I got a second shift on an “intake ward.” For some reason, nearly everything else was chosen first.

There was a good reason for this. The intake ward was the first landing place for people who were picked up by the police and given to the hospital instead of running through the court systems because of some obvious reason that they belonged here. I had wrongly imagined that the intake ward would be populated by gently eccentric people brought in by concerned families — not so, those people went to private institutions. In our hospital, the two major paths in were being brought in by the police, or on a stretcher, often to go through the most brutal phases of substance withdrawal. Many were homeless, picked up by the police for something as minor as vagrancy, but managing to clearly demonstrate that they were “a danger to themselves or others.” More than a few homeless wanted to get in to the hospital, checking themselves in, and living out their days with food, shelter, and medical care.

Though the greatest reason for its unpopularity among the staff was the sheer unpredictability of the place. After settling in on a ward, you got to know the patients well — what might set them off, what they like, who needs company. While everybody has their good and bad days, they are within parameters well established by their particular afflictions and medications. Not so on the intake ward. Anything could happen, so you had to constantly keep on your toes, and since everybody is virtually unknown, you can’t tell the difference between the truly docile and those preparing to spring into violent action. To make things just a little worse, most of the people there are quite convinced they don’t belong there at all — and a few actually don’t.

Within a few minutes of my arrival on the ward, I was waved over by a patient sitting in the day hall. He looked around to make sure nobody was listening, and said, “hey, want to know how to make a silver watch out of a nickel?”

“Sure,” I said. While you never want to buy into anybody’s delusions, it never hurt just to listen to anybody.

“Do you have a nickel?”

I searched my pockets, and came up with a dime and a penny, and nothing else. We didn’t carry much, and our keys were required to be firmly attached to our belts. In many cases, the keys dangling from the belt were the only way you could tell staff from patients. “No,” I said, showing him the two coins.

“Well, those won’t work, but I’ll at least tell you how to do it. You’ll have to just imagine the nickel. Now pay close attention,” he said, holding his palm flat, and pointing to the center. “First, you put the nickel in the center of your palm. Right in the middle, right about here.” He traced a nickel-sized circle on his palm.

He paused, looking around to see if anybody was paying attention. They weren’t. “Okay, now make sure you get it in the exact center of your palm. Right in the middle. Have you got that so far?”

“Yes,” I said earnestly, holding out my palm and pointing. “Right here.”

“Exactly,” he said, triumphantly. “You get that just right, and the rest is easy.”

I waited.

“Okay, the next thing you do,” he glanced around again, as if he were about to divulge a tremendous secret. “Is you get some tools, you make all the parts, and you put them together.” He beamed, having conveyed his miracle system to somebody who understood. “Next time I see you, make sure you have a nickel, and I’ll make sure you do it right.”

There was no telling what might happen with an actual nickel. Would he be profoundly disappointed in our inability to make his technique work? Would he become violent, now viewing me as an enemy, unable to use his closely held secret? Or would his delusion simply shift, always chasing what wasn’t around?

A call for help left me for little time to contemplate, and I ran to the source of the call. Another MHA blithely watched me run by (as was the case, more often than not) either on an assignment that takes priority, or simply profoundly lazy or risk-averse. I usually made an effort to believe the former.

I got to a room where a patient was up on a desk, waving a lamp, still plugged in and brightly glowing, and yelling “I’m not crazy!” which was doing surprisingly little to convince anybody. A staff member — an MHA, by the looks of him — sat on the ground by the desk, bleeding from the head, and looking slightly dazed. I had a little more sympathy for the man on the desk than the man under it, for some reason.

“Hi,” I said, as brightly as I could.

“Don’t touch me,” he said, fairly calmly, still brandishing his lamp.

“No problem,” I said, stepping out of the doorway. “Mind if I touch him?” I pointed to the dazed MHA.

I walked over and got him to his feet. To the man with the lamp, I said, “I’m just going to get him out of here and hand him over to the nurse. He seems to be upsetting you.”

“Uh. Okay,” he relaxed a bit, finally seeming to notice that the lamp in his hand. And that he was on the desk. He climbed down sheepishly and set the lamp down as I dragged the MHA outside the room. Aside from being dazed, he seemed okay, so I dumped him in a chair by the door and went back in.

I was followed by something I hadn’t seen on any ward during my entire tenure at the hospital — a psychiatrist. He stepped in, looked at the man now sitting at the desk, and said, “are you more angry or frightened right now?”

He gave this some thought, and said slowly, “frightened.”

The psychiatrist turned to me and said, “I think we’re okay here, I don’t want you to frighten him.”

The MHA was still sitting outside the room. Still rather dazed. Maybe a concussion. I half led, half dragged him to the nurse’s station, where I left him.

I returned to the day hall to find a man with a white headband and wristbands, neatly groomed moustache, clean, expensive tennis shoes, and an incongrously ratty-looking oversized t-shirt and shorts. “You there,” he addressed me as if I were his waiter, “I could use a hand here.”

I walked over and asked what I could do. “Any chance I can make a phone call?”

“Sure,” I said, pointing him to the pay phone.

He looked dejected. “I don’t suppose you’d loan me a quarter, would you?”

Because I had checked earlier, I knew for a fact I had a grand total of eleven cents in my pockets. “Just a minute,” I told him.

I walked back to the nurse’s station, where the MHA with the head would was lying on a bed behind the nurse… snoring. The nurse sat by the window, reading a magazine, and looked up at me.

“Hey, does that guy have a quarter in his pocket?” I asked.

Without a word, the nurse walked over and fished around in the snoring man’s pockets. In a moment, he produced a quarter, and handed it to me without a word. He went back to reading his magazine.

I went back to find the guy with the headbands talking to the guy who knows how to make silver watches out of nickels, nodding absently as he explained that “apparently, the police don’t like it when you try to play tennis naked.” He brightened when I handed him a quarter.

“Thank god,” he said. “My wife is going to kill me.”

“Yeah,” his friend agreed. “It’s too bad you didn’t get a nickel.”


The man with the lamp found me in the day hall next. “I just wanted to say thanks,” he said awkwardly. “You know, for not punching me or anything.”

“No problem,” I said brightly. “Hey, how did it go with the psychiatrist?”

“Well,” he said sadly, “he’s kind of a dick. I think I’m going to be stuck here for a while.”


A couple of weeks later, I got another shift in the intake ward. All the faces were new, as I should have expected, every patient who was there before either discharged or moved to a more permanent ward. Lamp guy and naked tennis guy had been discharged; nickel guy was committed to one of the long term wards, and I did see him now and again. He’d recognize me right away.

“Hey!” he’d call as soon as he saw me. “Did you ever find a nickel?”

Once, I actually had a nickel, which I handed to him. He examined it carefully, shook his head, and handed it back. “This one won’t work,” he told me. “It’s the wrong year. Keep looking, though, chief, I know you’ll do it.”

Share

Crazy Days at Metropolitan State Hospital – The Tunnels

I moved to Waltham, Massachusetts a few days before my job started at Metropolitan State, and so I decided to look around Boston. Without a lot of cash, the best thing to do seemed to be to get on the T, pick a station, get out and wander around. I did precisely that, and as I got off the T at about 8:00 a.m., a guy with a shaved head walked up to me, looking rather lost, and perhaps a little jittery.

“Hey, uh,” he said sheepishly, “do you know the way to the train?”

“Do you mean the T?” I asked, unsure if he meant the same thing.

“Nah, I just came from the T,” he said in his thick Boston accent. “I mean the trains, like, to leave town.”

“Sorry, I have no idea, I just got here,” I explained. “I just got off the T, but that’s really the only thing that I know where it is.”

“That’s cool,” he said, and wandered off, presumably to ask somebody who knew what they were talking about.

He was quickly forgotten as I saw the sights in Boston, returning early in the afternoon. I got off the T and stood at the bus stop for one of the electric buses that passed near my Waltham apartment. As the bus came, a woman with a baby struggled with folding her stroller and asked if I would hold her baby for a moment.

“Sure,” I said, as the baby slept, and I was careful to support his neck.

She got on the bus with the stroller. The bus doors closed, and the bus drove away.

So I was alone, in a strange city, with a baby, and no earthly clue as to what exactly I should do next. I was going to get on that bus, obviously, so I at least had to wait for the next one, but if it came… should I get on? Would it be better to stay put, or go somewhere like a police station?

The thought occurred to me that this was my baby now, and I was picked, not to hold the baby for a moment, but to raise it as my own.

Another bus came by, and I decided not to get on. The most reasonable course of action seemed to be to just stay put, until the baby woke up. And then figure out what to do.

As I contemplated this, another bus stopped on the other side of the street (coming the other way) and the mother jumped out in a panicked run across traffic, yelling something along the lines of “OHMYGODMYBABYTHANKGODTHATFUCKINBUSDRIVER.” My ear had not quite attuned to the Boston accent, so I’m not entirely sure. At any rate, she gave me a hug, and took her baby. When the next bus came, I carried the stroller on board and got on first.

I hadn’t even begun work yet.


At the end of my first week of work, my supervisor assigned me to “take out the trash.” There was a big plastic-over canvas on a steel frame cart filled with trash bags and loose trash; “Dan” pointed out an old-style freight elevator in the middle of the ward with a steel door that required keys to open. “You can get down to the tunnels down through there, and then it’s a bit of a maze,” he explained, as I pushed the cart into the elevator. “Gordon will show you. He’s a patient, but he’s pretty trustworthy.”

With that endorsement, “Gordon” stepped onto the elevator as “Dan” walked away — he seemed awfully familiar, and we were descending to the tunnels as I suddenly realized where I’d seen him before — he was the person who had asked me for directions to the trains.

“Gordon,” who hadn’t said anything but had been staring at me since he got on, recognized me, too. “Heeeey,” he said, “you’re that guy I asked for directions.”

“Ah, I remember you as well,” I said. I couldn’t think of anything else to say, so to fill the uncomfortable silence, “did you ever find the trains?”

“What the hell do you think?” he said, becoming agitated. “Would I be back in this hospital if I’d found the goddamned trains?” He grabbed the trash cart, and started lifting it up and smashing it into the metal walls and steel gate of the elevator. The racket echoed up and down the shaft, and through the tunnels, and he was shouting now. “YOU KNEW WHERE THE TRAINS WERE, YOU JUST DIDN’T WANT TO TELL ME BECAUSE YOU KNEW I’D ESCAPED, YOU SON OF A BITCH” “Gordon punctuated this by slamming his body and the cart into the walls of the elevator as I backed into a corner, trying to be inconspicuous.

The elevator stopped. So did “Gordon.”

“Oh good, we’re here,” said Gordon cheerfully, as if nothing had happened. Seeing me frozen into my corner, he laughed and said, “just messin’ with you, man.” He started whistling and pushing the trash cart. “By the way, don’t tell anybody I escaped, they won’t let me do this any more.”


The tunnels at Metropolitan State were absolutely amazing. Under the buildings, miles and miles of tunnels criss-crossed the gigantic campus, leading to intersections, dead ends, sometimes entrances, and long-forgotten rooms and parts of buildings that hadn’t been used for years. Trash detail was an opportunity to explore that I thoroughly enjoyed — most of the time, “Gordon” and I would go together.

Most of the tunnels were long-ago painted concrete corridors lit with bare bulbs, in some cases so sparse that you could barely see the next lit one in the darkness ahead. A channel ran down the middle of the tunnel for drainage, and the floor gently sloped toward the channel. In the channel there was sometimes a trickle of water, but more often there would be some of the largest, most fearless cockroaches I’d ever seen in my life. Rather than hide, they had a tendency to stop and rear up as you walked by. It was like being threatened by a wallet with antennae.

A lot of rooms were empty and uninteresting, containing little but debris, but there was a room that contained an old-style dental chair with restraints with a few large splashes of brown stains on it; a few rooms just filled with little cages, about rabbit-sized; a room with one larger cage in the center, about human-sized; a room with a bed frame in the center of the room where the concrete walls had been chipped away nearly everywhere that a person could probably reach; a room where chains hung from the ceiling from a couple of high beams. Every new discovery was bizarre and creepy, yet stimulating. Most were probably arranged as we found them for much more mundane reasons than we could imagine.

As we explored further and further from the ward, we’d have to run in order to avoid being missing for too long — the loading dock entrance where we dumped the trash wasn’t very far away, and presumably either one of us would be missed — at least I thought so, until we got lost. So lost, in fact, that we had to leave the tunnels to get our bearings, and didn’t recognize the buildings around us — though it was an easy matter to walk back to our building by navigating by the bell tower. (We didn’t want to run, since that would probably raise questions, and possibly an alarm, so we settled for as casual-looking a power walk as we could manage.)

We slipped into the ward through the front door, then back down to the tunnels to retrieve the trash cart.
“Dan” saw us step off the elevator with the trash cart. “Where did you guys go? Did you guys get lost?”

“Gordon” answered before I could, “Yeah, nobody down there knew where the FUCKING TRAINS are.”

Share

Crazy Days at Metropolitan State Hospital – I Don’t Belong Here

My first day of actual work, after training, was in the ward that would be where I spent most of my time at Met State. On the sprawling, 400-acre complex, it was a wing of yet another giant building, designated by a floor and direction. Between the staff, it was known as “chronic, long term,” which I was never quite sure was an official description or not.

Wards operated under the nominal control of a nurse, who usually sat in the “infirmary,” a little room with a half-door where medication was handed out. Operational control of the ward was in the hands of my immediate supervisor “Dan,” an MHA-3 (the number indicated seniority and pay grade), a large, genial man who introduced me to many of the patients, and outlined the basics of the job. We parted so that he could take care of something, and one of the patients I had just met pulled me aside.

“Donna” looked like a mental patient. Older and somewhat scrawny, she had a tired and haunted look. “You’re new here,” she said in a low voice. “You’ve got to help me.”

“Certainly,” I said cheerfully. “Just tell me what I can do.” We walked into the day hall, a kind of semi-open porch where there were open windows covered with bars and chain link fence.

“I don’t belong here,” she sighed, “I’ve been here for thirty years, and nobody will listen to me.”

I sat down to listen. I was determined not to judge her by her appearance — 30 years of living in a mental hospital would surely make anybody look like they belonged there. It was also my first opportunity to do some good; I assured her I’d listen, and do what I could.

“When I was a girl,” she continued, “my mother had me committed. You see, I’m a …” she glanced around to see that nobody was listening, and whispered, “lesbian.”

“In those days it was considered a mental illness; it wasn’t normal, and my mother had no idea how to cope with it. So she committed me to this place, and at first, being a lesbian was enough to keep me here.” She looked defeated and sad as she went on. “But now I’ve been here so long, I can’t get anybody to review my case or listen to me, and I’ll be stuck here for the rest of my life. My mother died a few years ago. There’s no reason for me to be here.” She went on to provide details of her plight.

I told her I’d do what I could. There were procedures for these things, that had mostly been alluded to in training rather than detailed. There was paperwork to fill out to request a case review by a psychiatrist, which requires case histories to be reviewed by the person filling out the paperwork — me. I asked Dan the MHA-3 where to find what I needed. He helped me locate all of it. “You’ll learn,” he said, with a knowing smile that wasn’t quite a smirk.

I finally located her case history — all on paper of course, in those days — and I checked with Dan to make sure I had the right one, because it didn’t appear to match at all. “Donna” had been there about thirty years, but the case history said nothing about being a lesbian, and said she’d been brought in for “incoherence and confusion” by the police as a young woman. Her file was also marked “voluntary,” which meant that she had not actually been committed, but was there on a voluntary basis. I looked through all of it, but for thirty years of being institutionalized, her file was surprisingly thin.

I located “Donna” in the day hall to talk to her before I continued with the case review paperwork. When I sat down next to her, she asked anxiously, “did you read my case file?”

“Yes…” I started, not sure where to go from there.

“Well, it might not do me any good,” she said, handing me a postcard. The picture was of an electric bus outside a library in Waltham. It was crumpled and worn, postmarked from Waltham about a month ago, and addressed to Donna, care of Metropolitan State. The handwriting was cramped and artistic, in blue ball point pen.

It read, “Dear Donna, please do not leave the hospital, we will come for you soon. — The Aliens”

Donna took back the postcard and waved her arms in an expansive gesture, “So I can’t leave yet, the aliens won’t know where to find me.”

She looked at the postcard for a moment. “Ahhh, I forgot to put the date on here.” Taking a pen from her pocket, she crossed out “soon” and wrote “tomorrow” in the same handwriting.

“They’re coming tomorrow,” she whispered in a conspiratorial voice. “Don’t tell anybody.” She then shouted, “IT’S OKAY, EVERYBODY, THERE ARE NO ALIENS COMING TOMORROW.” She gave me a wink, and left the day hall.

Dan walked up and put his hand on my shoulder. “Don’t let that discourage you,” he said. “In a place this big, there’s bound to be people here who don’t belong here.”

That was to turn out to be true.

Share

Know Your Audience

In my idealistic days before I headed off to Antioch College, I needed a physical exam to complete my eligibility requirements. Feeling like an adult at 17, I set up my own appointment and showed up to the doctor for the first time I remember ever going without being sick.

Everything was routine until we got to testicular exam. The doctor asked, “do you mind if a few medical students observe this part?”

“Sure,” I answered, without really thinking about it. Surely it would be over soon enough, and I’d most likely never see these people again. How bad could it be?

It hadn’t occurred to me what kind of medical students would observe a testicular exam, rather than just performing it on themselves. That’s right — medical students without testicles. My pants were already down as the room filled up with young, female medical students, perhaps specifically chosen for their attractiveness. “A few” turned out to be somewhere closer to “ten,” but at this point I’m focusing as hard as I can on not getting an erection while an audience of gorgeous females stares at my naked junk.

I’ve had the dream where I try to explain why I’m completely unprepared for the test and why I’m sitting in class naked. I woke up in a cold sweat, feeling like I’d run ten miles. This was somehow much, much worse.

The doctor, businesslike and professional, has apparently prepared by chilling his hands to a temperature that won’t melt ice cream. He talks and points. I have apparently discovered the secret of slowing down time, because each second stretches out for an eternity. When I steal a glance at my attractive audience, they’re all staring intently at the doctor’s hands, some frowning, some taking notes. Should I close my eyes? Look up at the ceiling? Look down? Nothing seems to be the right thing to do.

When it’s finally over, the students start shuffling out the door, and the doctor turns his attention to my glands or organs or something. About half the students glance up at me. I’m sure I catch a few smiles, but I can’t think of anything reasonable to say. “You have really cold hands,” I say to the doctor, and giggles erupt as he closes the door behind them.

The moral to this story: don’t make assumptions.

Alternative morals: don’t trust your doctor; weird things can happen anywhere; things can always be worse

Share

The Buzz in Comp Sci

In college, like a lot of students who had exhausted the computer science curriculum, I worked in one of the college computer labs for extra cash, helping out students on the basics, like Logo or Pascal. Not to put too fine a date on it, but the lab I usually helped out in was populated largely with Apple //e computers. People who weren’t actually programming or who did not have files in Appleworks would use the MacIntosh lab, so my room was sparsely populated at best, usually a few students and a lot of empty stations.

After finals, the lab was still open until the end of the quarter, so that anybody who had final work to do or wanted to get an early start on next quarter, or who just wanted to play around could come in and get things done. During this time, the handful of students would be reduced to zero or one for entire lab periods, and I’d pass the time by working on my own projects or reading technical manuals.

It was a big room, with about 40 workstations around the perimeter about ten feet apart, and some tables in the middle. It was on the top floor of an old brick building, with undersized windows, an aging and discolored drop ceiling of accoustic material, and old-style hanging fluorescent lights. Every now and then, the lights would flicker, but not often enough or badly enough to bother calling Maintenance. However, there was a constant buzz from overhead that I’d always found distracting and irritating by varying degrees, and today, it seemed even louder than usual.

Since there was nobody in the lab, I decided I’d rather deal with dimness than with a constant buzzing, so I opened the shades to let in what light there was and turned off the fluorescent lights. I wrote a little sign so that people would know the lab was open despite it being dimly lit, and walked back to my desk in the corner.

After a moment, I noticed that the buzzing had not stopped. Instead of coming from the lights, the sound appeared to be coming from above the drop ceiling. I walked around the room, trying to locate the source of the sound, but it seemed to be coming from no specific point, and would get louder and softer and seem to shift around.

Imagining some weird infrastructure running above the ceiling, and curious as to what it could be, I picked one of the least-stained tiles, stood up on a table, and poked my head through. My eyes had adjusted enough to the dim light where I could see well enough, I just couldn’t believe what I was seeing.

The area above the drop ceiling had become a giant beehive.

I was torn between the urgent desire to get the hell out of there and fascination at having my head, essentially, inside a giant beehive. The bulk of the hive, including visible honeycombs, was along the far corner of the wall, where the ceiling was most discolored. The thick yellow stuff that seemed to ooze out from the tiles along the wall that I had mistaken for some kind of insulation was actually honey. (I tasted it later to be sure.) In retrospect, both the wet-grey looking stains on the tiles and the dark yellow ooze on the walls had grown steadily, almost imperceptibly, since I had been working there. Almost every day, a handful of bees would fly through the room, but would usually disappear before they became bothersome to anybody but the most fearful or allergic. I hadn’t thought much of it.

Now, hundreds of bees flew busily past my head as I stood there, frozen, a ceiling tile balanced on my head, afraid to move. Tens or perhaps hundreds of thousands massed in the corner that I found difficult to stop staring at. They bumped into my head and face at a steady rate on their way by.

I gradually lowered my head, gently settling the ceiling tile back into its metal rails. I grabbed my chair and spent the rest of the quarter watching the empty computer lab from the hallway.

Share

Spam Prevention, or, the sorry state of Email

Email spam is universally loathed. It’s difficult to prevent entirely, not only because spammers have a wealth of techniques at their disposal, but because so many legitimate mailers are misconfigured or routinely behave like spammers. The best approaches to combating spam involve multiple techniques to combat various spam techniques. I’ll outline what works, and what doesn’t, and hopefully provide some insight into how spammers work, and some of the more sleazy techniques I’ve encountered.

There’s a spectrum of spam, from the terrifically illegitimate to the “legitimate,” where a semi-reputable company adds you to their mailing list because of something you ordered (perhaps you left a default box checked that said “I want to receive marketing material via email.”) On the illegitimate side are usually commercial operations dedicated to spam, often using zombie farms of compromised machines to send out vast volumes. They often use sophisticated techniques to avoid content filters (like sending vast amounts of legitimate-sounding gibberish.) Eliminating the maximum amount of spam requires a multiple layered approach. I’ve outlined this for mail administrators:

Layer 1: Blacklists and Server Verification
Spam blacklists are simply wonderful at eliminating most spam from bot-farms and sleazy operators. Blacklists are DNS lookups where you can verify an IP address is not on it before you accept email from that IP address. False positives are nearly zero for the good lists, though every now and then somebody like AOL makes it onto a blacklist, but at the best blacklists, this doesn’t happen. A review of our mail servers’ statistics show that sbl-xbl.spamhaus.org is solely responsible for rejecting over 95% of attempts to spam our server. This capability is provided by milter-dnsbl.

Server verification covers the other 5%. In a nutshell, this verifies that the IP address that a system provides during the MTA phase of negotiations is legitimate. Over time, we’ve encountered a few mailers that, for whatever reason, have run afoul of this filter, either from misconfiguration, or from perversely sending email from an unresolvable address. I can’t think of a legitimate reason why anybody would feel the need to use unresolvable addresses to send mail; in cases where I’ve pursued this, it’s generally been the fault of a bumbling administrator or IT department. Every time I’m tempted to relax this requirement, I look at the volumes of spam eliminated and think, hey, if you can’t configure your own mailer properly, maybe nobody should accept mail from you. This capability is provided by spamilter.

Layer 2: Greylists
After making it past the blacklist, the next thing encountered by a would-be mailer is the greylist. To put it succinctly, a greylist is a way of telling certain mailers, “try again later.” Legitimate mailers will do exactly that, while a lot of spam farms give up confusedly. For others, it gives them enough time to be placed on a blacklist next time they make the attempt. A greylist works by tracking the IP (and often, origin email) of the mailer that is contacting you. Next time that same mailer contacts you, if enough time has expired, it’s allowed through.

The tricky part about greylists is coping with the behavior of some mailers, particularly big ones. Those that adhere to SPF are easy, most greylists will happily let SPF-compliant mailers right through. For the rest, most greylist implementations have a “whitelist” of mailers that respond poorly to the technique, either by sending from a different IP address every time (and therefore never satisfying the waiting period) or known issues where mailers may get confused or not retry for a very long time.

Another side effect is that legitimate mail can, and will, be delayed. A particularly effective technique is to greylist all email from origins not within your country — in my case, skipping the greylist for US-origin addresses interferes with as little mail as possible — and most of the spam comes from non-US computers. This capability is provided by milter-greylist.

Layer 3: Content Filtering
Hopefully, most spam is eliminated before we get this far, because no matter how sophisticated content filtering gets, it can be problematic to consistently separate spam from (for example) messages from a family member who spells poorly and has questions for you about Viagara.

So the first thing to go is make another run through the blacklists. While this may seem redundant, the reason for this is that it will pick up blacklisted IP addresses that are relaying through somewhere else. A common spam technique is to create an email forwarding address for you on a service like bigfoot (I see a lot of these) and then spam that address, which merrily forwards all the spam to you, thus effectively skipping the blacklist — unless you scan through all the headers, too. This capability is provided by spamilter.

The next thing to do is eliminate the obvious — mangled email. While spammers make an effort to make their mail look legitimate, invalid or multiple headers can result from spam being relayed through security holes in web sites. Spammers generally can’t see the results, nor do they care. In a related way, it’s a common technique for spammers to add multiple headers of the same type, violating most specifications but often bypassing content filters that expect mail to be in mail format, or by pumping through headers designed to exploit loopholes in clients or to overload mail servers. Since people using legitimate mail clients aren’t capable of producing broken mail, getting rid of broken mail causes no harm. This capability provided by mimedefang.

The next capability is filtering the content itself using a number of heuristic techniques that have been tuned over time, using capabilities provided by Spamassassin. Spamassassin does quite a good job, although sophisticated spammers will regularly test their spam content against its rules. Therefore, a good practice is to update its rules regularly using sa-update.

It’s also worth eliminating virus spam at this point. clamav provides this capability handily. As with spamassassin, it’s most effective when updated regularly.

Level 4: Sieve Rules
At this point, there is still a potential for false positives, and some things are going to slip through. Therefore, content filters normally just flag email. Sieve rules are a hierarchy of rules that determine how to treat email. So legitimate mail can be saved from the junk filter, and persistent spammers can be shuttled over to the Junk folder. These are normally in the hands of end users, but general rules can be effective site-wide.

Level 5: Don’t REPLY
This is true on a number of levels, the first being that a mailer should summarily reject all mail that’s not to legitimate users, rather than accept it, and attempt to bounce it back. There’s a whole class of spam known as “bounce spam,” where the “reply to” address is the actual victim, and the spammer sends email to a legitimate mailer and an invalid address. The mailer happily forwards it “back,” which actually sends the spam to the victim. There’s no benefit to ever automatically emailing the reply to address from the mailer level, either to inform an end user that they’ve typoed an email address (rejection serves that purpose adequately) or to inform an end user that they’ve sent a virus — the reply address is almost never the originator.

This also extends to the end user. For legitimate businesses, replying is usually an effective way to be removed from their mailing list — if you recognize the domain and have done business with them, there’s little risk. More sleazy operators, however, take the opportunity to add your legitimate email address to hundreds of other lists, even while nominally removing you from the list you’re presumably unsubscribing from. Your legitimate email address can now be sold to other spammers.

In a similar vein, it’s often a bad idea to click where it says “click here to be removed” for the same reasons. A particularly sleazy form of this actually takes you to a page covered with ads, and the unsubscribe box (filled in) in the middle. The spammer has now made money, because you’re a unique visitor to whom those ads have been displayed — even more if one catches your eye and you click on it.

Level 6: Report Spam
Reporting spam has a number of benefits, the biggest one is the overall reduction in spam. Spamcop is probably the best way to report spam — it sends email directly to the administrators of the systems, which are either misconfigured (open proxies or relays) or a customer of theirs is the spammer. Spamcop does an excellent job of analyzing email headers and finding out who’s really responsible. Note that spammers will often include legitimate URL’s in their spam, so it’s best to pay close attention to who the reports are being sent to any why.

Share