Re: [apps-discuss] A greylisting question

"John Levine" <johnl@taugh.com> Fri, 17 February 2012 20:46 UTC

Return-Path: <johnl@iecc.com>
X-Original-To: apps-discuss@ietfa.amsl.com
Delivered-To: apps-discuss@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2256121E8053 for <apps-discuss@ietfa.amsl.com>; Fri, 17 Feb 2012 12:46:11 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -109.822
X-Spam-Level:
X-Spam-Status: No, score=-109.822 tagged_above=-999 required=5 tests=[AWL=1.377, BAYES_00=-2.599, HABEAS_ACCREDITED_SOI=-4.3, RCVD_IN_BSP_TRUSTED=-4.3, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mlAry25LRJ9a for <apps-discuss@ietfa.amsl.com>; Fri, 17 Feb 2012 12:46:10 -0800 (PST)
Received: from leila.iecc.com (leila6.iecc.com [IPv6:2001:470:1f07:1126:0:4c:6569:6c61]) by ietfa.amsl.com (Postfix) with ESMTP id B9D3221E8020 for <apps-discuss@ietf.org>; Fri, 17 Feb 2012 12:46:09 -0800 (PST)
Received: (qmail 15283 invoked from network); 17 Feb 2012 20:46:08 -0000
Received: from leila.iecc.com (64.57.183.34) by mail1.iecc.com with QMQP; 17 Feb 2012 20:46:08 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=iecc.com; h=date:message-id:from:to:cc:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:vbr-info; s=4f3ebc90.xn--9vv.k1202; i=johnl@user.iecc.com; bh=VrMN2DLA2baY0ptBZ5FQk8lMrtpLJq+2dq8im1Cnk7o=; b=wMyI0rbUz4Hj7TGHZUzNnAzd6U0W3xJn7/Lk8GULkBzcbDXDxlqAy8Rx5I3oCitMv9y3PYjxgnkF2Q2Ls3QIB6KAZp+fUrbr7JXCg86aOfFpD5eER7ZBMbVXpU2+un5FOhVdNkrwWRTUSpLkUA7kqJAEULsaYZbF3dBy3KuGqKM=
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=taugh.com; h=date:message-id:from:to:cc:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:vbr-info; s=4f3ebc90.xn--9vv.k1202; olt=johnl@user.iecc.com; bh=VrMN2DLA2baY0ptBZ5FQk8lMrtpLJq+2dq8im1Cnk7o=; b=rFy9CZGatKpiFecfkA/LHeUepRGFUbj8MLPx18xA51NgJnzwpOBvhra38mh5+JgIr5e1mwZGMS4mLfqLlWD5Pt3DcAwxWqHCxPT30KdEwsi1azpTJb/TrnY3f3ko6L6aCHOKYAnzNCVYkOAwZVOMkyuavdJrYOuPsPYe46apOrg=
VBR-Info: md=iecc.com; mc=all; mv=dwl.spamhaus.org
Date: Fri, 17 Feb 2012 20:45:46 -0000
Message-ID: <20120217204546.74515.qmail@joyce.lan>
From: John Levine <johnl@taugh.com>
To: apps-discuss@ietf.org
In-Reply-To: <4F3E5B1B.7090200@dcrocker.net>
Organization:
X-Headerized: yes
Mime-Version: 1.0
Content-type: text/plain; charset="utf-8"
Content-transfer-encoding: 7bit
Cc: dcrocker@bbiw.net
Subject: Re: [apps-discuss] A greylisting question
X-BeenThere: apps-discuss@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: General discussion of application-layer protocols <apps-discuss.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/apps-discuss>, <mailto:apps-discuss-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/apps-discuss>
List-Post: <mailto:apps-discuss@ietf.org>
List-Help: <mailto:apps-discuss-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/apps-discuss>, <mailto:apps-discuss-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 17 Feb 2012 20:46:11 -0000

>There will, at least, be some differences and possibly many.  But since we have 
>no experience with this stuff in that space, we can't be sure.

Yoo hoo.  I've been greylisting IPv6 for a while.  What I can mostly
say is that the small number of IPv6 MTAs I see retry just like IPv4
MTAs.  I don't think I've seen any bots except maybe one or two that
went through a v4-v6 gateway of some sort without intending to.

At this point, most of the v6 mail I see comes from a handful of
senders who do it because it's cool (notably NANOG and IETF), or
they're testing it.  Most of the spam comes from insecure web hosts
who are dual homed.

So I agree that we have little to say about IPv6 at this point beyond
nothing that the principle is the same.

-- 
Regards,
John Levine, johnl@iecc.com, Primary Perpetrator of "The Internet for Dummies",
Please consider the environment before reading this e-mail. http://jl.ly