Re: [Asrg] SPF: Objection: spammers will use <>

Markus Stumpf <maex-lists-spam-ietf-asrg@space.net> Tue, 17 June 2003 18:15 UTC

Received: from www1.ietf.org (ietf.org [132.151.1.19] (may be forged)) by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA29775 for <asrg-archive@odin.ietf.org>; Tue, 17 Jun 2003 14:15:46 -0400 (EDT)
Received: (from exim@localhost) by www1.ietf.org (8.11.6/8.11.6) id h5HIFJJ12316 for asrg-archive@odin.ietf.org; Tue, 17 Jun 2003 14:15:19 -0400
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by optimus with esmtp (Exim 4.20) id 19SJyk-0004DO-2U for asrg-web-archive@optimus.ietf.org; Tue, 17 Jun 2003 13:10:42 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA26656; Tue, 17 Jun 2003 13:10:38 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19SJwV-0001qK-00; Tue, 17 Jun 2003 13:08:23 -0400
Received: from ietf.org ([132.151.1.19] helo=www1.ietf.org) by ietf-mx with esmtp (Exim 4.12) id 19SJwU-0001qH-00; Tue, 17 Jun 2003 13:08:22 -0400
Received: from www1.ietf.org (localhost.localdomain [127.0.0.1]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h5HBN1a18755; Tue, 17 Jun 2003 07:23:01 -0400
Received: from ietf.org (odin.ietf.org [132.151.1.176]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h5HBMZm18736 for <asrg@optimus.ietf.org>; Tue, 17 Jun 2003 07:22:35 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id HAA07399 for <asrg@ietf.org>; Tue, 17 Jun 2003 07:22:35 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19SEVe-00052G-00 for asrg@ietf.org; Tue, 17 Jun 2003 07:20:18 -0400
Received: from moebius2.space.net ([195.30.1.100] ident=qmailr) by ietf-mx with smtp (Exim 4.12) id 19SEVd-00052D-00 for asrg@ietf.org; Tue, 17 Jun 2003 07:20:17 -0400
Received: (qmail 59696 invoked by uid 1013); 17 Jun 2003 11:22:33 -0000
From: Markus Stumpf <maex-lists-spam-ietf-asrg@space.net>
To: Meng Weng Wong <mengwong@dumbo.pobox.com>
Cc: Markus Stumpf <maex-lists-spam-ietf-asrg@space.net>, Barry Shein <bzs@world.std.com>, asrg@ietf.org
Subject: Re: [Asrg] SPF: Objection: spammers will use <>
Message-ID: <20030617132233.P57133@Space.Net>
References: <20030612202450.1BC97DE41@dumbo.pobox.com> <16106.18479.22082.172583@world.std.com> <20030614055858.GB12997@dumbo.pobox.com> <20030616163347.B57133@Space.Net> <20030616162825.GF29227@dumbo.pobox.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
User-Agent: Mutt/1.2.5.1i
In-Reply-To: <20030616162825.GF29227@dumbo.pobox.com>; from mengwong@dumbo.pobox.com on Mon, Jun 16, 2003 at 12:28:25PM -0400
Organization: SpaceNet AG, Muenchen, Germany
X-PGP-Fingerprint: 66 F3 75 79 01 D0 B8 5F 1A C7 77 88 4A B6 70 DF
Sender: asrg-admin@ietf.org
Errors-To: asrg-admin@ietf.org
X-BeenThere: asrg@ietf.org
X-Mailman-Version: 2.0.12
Precedence: bulk
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=unsubscribe>
List-Id: Anti-Spam Research Group - IRTF <asrg.ietf.org>
List-Post: <mailto:asrg@ietf.org>
List-Help: <mailto:asrg-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=subscribe>
List-Archive: <https://www1.ietf.org/pipermail/asrg/>
Date: Tue, 17 Jun 2003 13:22:33 +0200

On Mon, Jun 16, 2003 at 12:28:25PM -0400, Meng Weng Wong wrote:
> The original DMP I-D says, in the case of a blank envelope sender,
> test using the HELO domain instead of the envelope sender domain.

Wow ... how's the weather on your planet?
Out of 7394 connections on one of our mailservers that is closed to
customer access 6789 had non matching (the hostname) HELO arguments.

Most HELO arguments are pc01 and the like.
On our MX mailservers the ration is similar, but of course the are a lot
of spammers that fake them, but I intentionally made the test on a non
MX mailserver.

So you want to force about 90% of all mailserver administrators (most of
the clueless) to change the configuration of their mailserver? Have fun.

	\Maex

-- 
SpaceNet AG            | Joseph-Dollinger-Bogen 14 | Fon: +49 (89) 32356-0
Research & Development |       D-80807 Muenchen    | Fax: +49 (89) 32356-299
"The security, stability and reliability of a computer system is reciprocally
 proportional to the amount of vacuity between the ears of the admin"
_______________________________________________
Asrg mailing list
Asrg@ietf.org
https://www1.ietf.org/mailman/listinfo/asrg