Re: [Asrg] Is there anything good enough? - Spoofing stats

David Walker <antispam@grax.com> Thu, 08 May 2003 19:53 UTC

Received: from www1.ietf.org (ietf.org [132.151.1.19] (may be forged)) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA07151 for <asrg-archive@odin.ietf.org>; Thu, 8 May 2003 15:53:09 -0400 (EDT)
Received: (from mailnull@localhost) by www1.ietf.org (8.11.6/8.11.6) id h48K2k412631 for asrg-archive@odin.ietf.org; Thu, 8 May 2003 16:02:46 -0400
Received: from ietf.org (odin.ietf.org [132.151.1.176]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h48K2j812628 for <asrg-web-archive@optimus.ietf.org>; Thu, 8 May 2003 16:02:45 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA07099; Thu, 8 May 2003 15:52:39 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19DrTW-0005b9-00; Thu, 08 May 2003 15:54:42 -0400
Received: from ietf.org ([132.151.1.19] helo=www1.ietf.org) by ietf-mx with esmtp (Exim 4.12) id 19DrTV-0005b6-00; Thu, 08 May 2003 15:54:41 -0400
Received: from www1.ietf.org (localhost.localdomain [127.0.0.1]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h48JtH812196; Thu, 8 May 2003 15:55:17 -0400
Received: from ietf.org (odin.ietf.org [132.151.1.176]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h48JsZ812154 for <asrg@optimus.ietf.org>; Thu, 8 May 2003 15:54:35 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA06545 for <asrg@ietf.org>; Thu, 8 May 2003 15:44:28 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19DrLb-0005Qd-00 for asrg@ietf.org; Thu, 08 May 2003 15:46:31 -0400
Received: from c.vorteon.com ([12.144.144.54] helo=maillist.grax.com) by ietf-mx with esmtp (Exim 4.12) id 19DrLa-0005QJ-00 for asrg@ietf.org; Thu, 08 May 2003 15:46:30 -0400
Received: from localhost (grax_web1 [127.0.0.1]) by maillist.grax.com (Postfix) with ESMTP id AE6762CB0D; Thu, 8 May 2003 14:46:54 -0500 (CDT)
From: David Walker <antispam@grax.com>
Reply-To: asrg@ietf.org
Organization: Vorteon, LLC
To: Vernon Schryver <vjs@calcite.rhyolite.com>, asrg@ietf.org
Subject: Re: [Asrg] Is there anything good enough? - Spoofing stats
User-Agent: KMail/1.5
References: <200305081317.53467@grx> <200305081850.h48Io86W021365@calcite.rhyolite.com>
In-Reply-To: <200305081850.h48Io86W021365@calcite.rhyolite.com>
X-Hockey: Colorado Avalanche
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Message-Id: <200305081446.53767@grx>
Content-Transfer-Encoding: 7bit
Sender: asrg-admin@ietf.org
Errors-To: asrg-admin@ietf.org
X-BeenThere: asrg@ietf.org
X-Mailman-Version: 2.0.12
Precedence: bulk
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=unsubscribe>
List-Id: Anti-Spam Research Group - IRTF <asrg.ietf.org>
List-Post: <mailto:asrg@ietf.org>
List-Help: <mailto:asrg-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=subscribe>
List-Archive: <https://www1.ietf.org/pipermail/asrg/>
Date: Thu, 08 May 2003 14:46:53 -0500
Content-Transfer-Encoding: 7bit
Content-Transfer-Encoding: 7bit

On Thursday 08 May 2003 01:50 pm, Vernon Schryver wrote:
> Most authorization policies are not documented in RFCs.  Long established
> spam defenses were once controversial hacks.  For example, requiring
> that sender domains be present and valid was controversial when AOL
> started checking, but it is now the default in popular MTAs.  Have
> you turned off that check because it is not mandated by an RFC?

I haven't turned it on yet.  So I guess so.
There is a direct logic path for that rule though.  
1.  Someone is sending me a message
2.  The domain they are sending from does not exist
3.  Therefore they are trying to deceive me and there is no need to bother 
accepting it.

The hacks I am objecting to, if I understand them correctly, abuse MX records 
so that I would only accept mail from a server if it is eligible to receive 
mail.  Sending and receiving are different functions and should not be 
required to be done by the same machine(s).
_______________________________________________
Asrg mailing list
Asrg@ietf.org
https://www1.ietf.org/mailman/listinfo/asrg