Re: [Asrg] who has the message (was Re: Consensus Call - submission via posting (was Re: Iteration #3))

Dave CROCKER <dhc@dcrocker.net> Tue, 09 February 2010 01:38 UTC

Return-Path: <dhc@dcrocker.net>
X-Original-To: asrg@core3.amsl.com
Delivered-To: asrg@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 72DCA28C1CD for <asrg@core3.amsl.com>; Mon, 8 Feb 2010 17:38:27 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.579
X-Spam-Level:
X-Spam-Status: No, score=-6.579 tagged_above=-999 required=5 tests=[AWL=0.020, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cwjJ+MNUZw+2 for <asrg@core3.amsl.com>; Mon, 8 Feb 2010 17:38:26 -0800 (PST)
Received: from sbh17.songbird.com (sbh17.songbird.com [72.52.113.17]) by core3.amsl.com (Postfix) with ESMTP id 95AA228C1D4 for <asrg@irtf.org>; Mon, 8 Feb 2010 17:38:26 -0800 (PST)
Received: from [192.168.1.43] (adsl-68-122-70-87.dsl.pltn13.pacbell.net [68.122.70.87]) (authenticated bits=0) by sbh17.songbird.com (8.13.8/8.13.8) with ESMTP id o191dOSI030151 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 8 Feb 2010 17:39:30 -0800
Message-ID: <4B70BCCB.5020405@dcrocker.net>
Date: Mon, 08 Feb 2010 17:39:23 -0800
From: Dave CROCKER <dhc@dcrocker.net>
Organization: Brandenburg InternetWorking
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.7) Gecko/20100111 Thunderbird/3.0.1
MIME-Version: 1.0
To: Anti-Spam Research Group - IRTF <asrg@irtf.org>
References: <20100209012039.98092.qmail@simone.iecc.com>
In-Reply-To: <20100209012039.98092.qmail@simone.iecc.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: ClamAV 0.92/10366/Mon Feb 8 08:41:04 2010 on sbh17.songbird.com
X-Virus-Status: Clean
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.0 (sbh17.songbird.com [72.52.113.17]); Mon, 08 Feb 2010 17:39:31 -0800 (PST)
Cc: John Levine <johnl@taugh.com>
Subject: Re: [Asrg] who has the message (was Re: Consensus Call - submission via posting (was Re: Iteration #3))
X-BeenThere: asrg@irtf.org
X-Mailman-Version: 2.1.9
Precedence: list
Reply-To: dcrocker@bbiw.net, Anti-Spam Research Group - IRTF <asrg@irtf.org>
List-Id: Anti-Spam Research Group - IRTF <asrg.irtf.org>
List-Unsubscribe: <http://www.irtf.org/mailman/listinfo/asrg>, <mailto:asrg-request@irtf.org?subject=unsubscribe>
List-Archive: <http://www.irtf.org/mail-archive/web/asrg>
List-Post: <mailto:asrg@irtf.org>
List-Help: <mailto:asrg-request@irtf.org?subject=help>
List-Subscribe: <http://www.irtf.org/mailman/listinfo/asrg>, <mailto:asrg-request@irtf.org?subject=subscribe>
X-List-Received-Date: Tue, 09 Feb 2010 01:38:27 -0000

On 2/8/2010 5:20 PM, John Levine wrote:
>> The DNS approach will tend to be somewhere between free and cheap for
>> mainstream uses.
>
> I keep seeing this assertion, but it makes no sense.  As a concrete
> example, here's the DNS for the POP server for BT Internet, the largest
> ISP in the UK.  Can you describe the DNS changes needed if they were
> publishing a spam button address?
>
> R's,
> John
>
> $ dig  mail.btinternet.com a
> ;; ANSWER SECTION:
> mail.btinternet.com.    600     IN      CNAME   pop-smtp.bt.mail.yahoo.com.
> pop-smtp.bt.mail.yahoo.com. 1800 IN     CNAME   pop-smtp.bt.mail.fy5.b.yahoo.com.
> pop-smtp.bt.mail.fy5.b.yahoo.com. 300 IN A      217.12.13.134
> pop-smtp.bt.mail.fy5.b.yahoo.com. 300 IN A      217.146.188.192


I don't hack DNS records enought to be sure, but it appears to need exactly one 
new record:

_report.pop-smtp.bt.mail.fy5.b.yahoo.com IN TXT   abuse-report@yahoo.com


or perhaps I'm wrong and it needs a whopping 3 new records:

_report.pop-smtp.bt.mail.fy5.b.yahoo.com IN TXT   abuse-report@yahoo.com

_report.pop-smtp.bt.mail.yahoo.com IN TXT   abuse-report@yahoo.com

_report.mail.btinternet.com IN TXT   abuse-report@yahoo.com



-- 

   Dave Crocker
   Brandenburg InternetWorking
   bbiw.net