Re: [Asrg] News Article - Microsoft and spam

"Chris Lewis" <clewis@nortelnetworks.com> Thu, 26 June 2003 21:29 UTC

Received: from www1.ietf.org (ietf.org [132.151.1.19] (may be forged)) by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA22806 for <asrg-archive@odin.ietf.org>; Thu, 26 Jun 2003 17:29:52 -0400 (EDT)
Received: (from exim@localhost) by www1.ietf.org (8.11.6/8.11.6) id h5QLTPP13640 for asrg-archive@odin.ietf.org; Thu, 26 Jun 2003 17:29:25 -0400
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 19VeJ3-0003Xv-R3 for asrg-web-archive@optimus.ietf.org; Thu, 26 Jun 2003 17:29:25 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA22770; Thu, 26 Jun 2003 17:29:06 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19VeIm-0006ER-00; Thu, 26 Jun 2003 17:29:08 -0400
Received: from ietf.org ([132.151.1.19] helo=optimus.ietf.org) by ietf-mx with esmtp (Exim 4.12) id 19VeIg-0006EO-00; Thu, 26 Jun 2003 17:29:02 -0400
Received: from localhost.localdomain ([127.0.0.1] helo=www1.ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 19VeIf-0003IG-8n; Thu, 26 Jun 2003 17:29:01 -0400
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 19VeIB-0003Hc-Vy for asrg@optimus.ietf.org; Thu, 26 Jun 2003 17:28:32 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA22744 for <asrg@ietf.org>; Thu, 26 Jun 2003 17:28:13 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19VeHu-0006DX-00 for asrg@ietf.org; Thu, 26 Jun 2003 17:28:14 -0400
Received: from zcars04f.nortelnetworks.com ([47.129.242.57]) by ietf-mx with esmtp (Exim 4.12) id 19VeHj-0006CN-00 for asrg@ietf.org; Thu, 26 Jun 2003 17:28:03 -0400
Received: from zcard307.ca.nortel.com (americasm03.nt.com [47.129.242.67]) by zcars04f.nortelnetworks.com (Switch-2.2.6/Switch-2.2.0) with ESMTP id h5QLQmd00153 for <asrg@ietf.org>; Thu, 26 Jun 2003 17:26:48 -0400 (EDT)
Received: from zcard031.ca.nortel.com ([47.129.242.121]) by zcard307.ca.nortel.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13) id NLV61QAP; Thu, 26 Jun 2003 17:26:49 -0400
Received: from americasm01.nt.com (clewis-2.ca.nortel.com [47.129.150.136]) by zcard031.ca.nortel.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13) id NLVG6DMB; Thu, 26 Jun 2003 17:26:48 -0400
Message-ID: <3EFB65E0.2030002@americasm01.nt.com>
X-Sybari-Space: 00000000 00000000 00000000
From: Chris Lewis <clewis@nortelnetworks.com>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.0.2) Gecko/20030208 Netscape/7.02
X-Accept-Language: en-us, en
MIME-Version: 1.0
CC: asrg@ietf.org
Subject: Re: [Asrg] News Article - Microsoft and spam
References: <2A1D4C86842EE14CA9BC80474919782E0D229A@mou1wnexm02.verisign.com>
Content-Type: text/plain; charset="us-ascii"; format="flowed"
Content-Transfer-Encoding: 7bit
Content-Transfer-Encoding: 7bit
Sender: asrg-admin@ietf.org
Errors-To: asrg-admin@ietf.org
X-BeenThere: asrg@ietf.org
X-Mailman-Version: 2.0.12
Precedence: bulk
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=unsubscribe>
List-Id: Anti-Spam Research Group - IRTF <asrg.ietf.org>
List-Post: <mailto:asrg@ietf.org>
List-Help: <mailto:asrg-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=subscribe>
List-Archive: <https://www1.ietf.org/pipermail/asrg/>
Date: Thu, 26 Jun 2003 17:30:08 -0400
Content-Transfer-Encoding: 7bit
Content-Transfer-Encoding: 7bit

Hallam-Baker, Phillip wrote:
> I think that we have to be realistic about the cost/benefit issue here.
> 
> Yes it is possible for a spammer to hire people to sign up for these
> schemes. However to do so requires capital which has an effect on the
> starting out spam senders.
> 
> A spam sender that tries to do this in  bulk is going to start to hit limits
> on the number of addresses a given IP address can sign up for at a time. 

Multiply that by the at least 200,000 unsecured proxies in the wild.

> It strikes me that it might be a good scheme to allow the spam senders to
> register large numbers of domains but mark them as being suspect spamhaus
> addresses. Then monitor the emails being sent out with spam filters and chop
> the account.

Gets back to the issue of how you detect spam...


_______________________________________________
Asrg mailing list
Asrg@ietf.org
https://www1.ietf.org/mailman/listinfo/asrg