RE: [Asrg] Some data on the validity of MAIL FROM addresses

Yakov Shafranovich <research@solidmatrix.com> Wed, 21 May 2003 18:12 UTC

Received: from www1.ietf.org (ietf.org [132.151.1.19] (may be forged)) by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA00291 for <asrg-archive@odin.ietf.org>; Wed, 21 May 2003 14:12:01 -0400 (EDT)
Received: (from mailnull@localhost) by www1.ietf.org (8.11.6/8.11.6) id h4LHctr02680 for asrg-archive@odin.ietf.org; Wed, 21 May 2003 13:38:55 -0400
Received: from ietf.org (odin.ietf.org [132.151.1.176]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h4LHctB02677 for <asrg-web-archive@optimus.ietf.org>; Wed, 21 May 2003 13:38:55 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA00264; Wed, 21 May 2003 14:11:31 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19IY2T-00014f-00; Wed, 21 May 2003 14:10:09 -0400
Received: from ietf.org ([132.151.1.19] helo=www1.ietf.org) by ietf-mx with esmtp (Exim 4.12) id 19IY2T-00014c-00; Wed, 21 May 2003 14:10:09 -0400
Received: from www1.ietf.org (localhost.localdomain [127.0.0.1]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h4LHW2B01495; Wed, 21 May 2003 13:32:02 -0400
Received: from ietf.org (odin.ietf.org [132.151.1.176]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h4LHVGB01450 for <asrg@optimus.ietf.org>; Wed, 21 May 2003 13:31:16 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA00017 for <asrg@ietf.org>; Wed, 21 May 2003 14:03:52 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19IXv4-000126-00 for asrg@ietf.org; Wed, 21 May 2003 14:02:30 -0400
Received: from 000-246-401.area7.spcsdns.net ([68.27.202.22] helo=68.27.202.22) by ietf-mx with smtp (Exim 4.12) id 19IXv3-000123-00 for asrg@ietf.org; Wed, 21 May 2003 14:02:30 -0400
Message-Id: <5.2.0.9.2.20030521140334.00ba68e8@solidmatrix.com>
X-Sender: research@solidmatrix.com
X-Mailer: QUALCOMM Windows Eudora Version 5.2.0.9
To: asrg@ietf.org
From: Yakov Shafranovich <research@solidmatrix.com>
Subject: RE: [Asrg] Some data on the validity of MAIL FROM addresses
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format="flowed"
X-MimeHeaders-Plugin-Info: v2.03.00
X-GCMulti: 1
Sender: asrg-admin@ietf.org
Errors-To: asrg-admin@ietf.org
X-BeenThere: asrg@ietf.org
X-Mailman-Version: 2.0.12
Precedence: bulk
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=unsubscribe>
List-Id: Anti-Spam Research Group - IRTF <asrg.ietf.org>
List-Post: <mailto:asrg@ietf.org>
List-Help: <mailto:asrg-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=subscribe>
List-Archive: <https://www1.ietf.org/pipermail/asrg/>
Date: Wed, 21 May 2003 14:03:36 -0400

At 11:02 PM 5/20/2003 -0400, Eric D. Williams wrote:

>I would like people to seriously consider this particular paragraph. It seems
>to touch on the vital issue of how 'spam' is produced in the wild and the
>automated means for its insertion into the MTS.  Whether an SMTP 
>implementation
>is 'modern' or not is not relevant to the issue IMHO, but that is a factor in
>determining what the footprint is for the various tools and techniques are 
>that
>are being utilized.
>
>Has anyone done a forensic examination of 'spamware' and/or developed a
>taxonomy of its internals?
>Will knowing the 'weapons' - to co-opt an analogy being proposed by some - 
>aid
>in defeating the 'enemy'?
>Are there any other 'artifacts' not directly related to the 'spam' problem,
>that can aid in determining methods to defeat 'it'?
>
>-e

If you remember that article from the Oregonian about a spammer talking 
about his business, he mentioned that spammers operate all kinds of clubs 
and chatrooms where such software is discussed and developed. The only way 
to obtain this software, is for someone to find a cooperating spammer (like 
that's going to happen!) or "infiltrate" these clubs acting as a spammer. 
That requires time and effort, and all of us are working people with not 
much of that going around. The spammer discussed in the article was 
unemployed I believe, and had plenty of free time.

Nevertheless, if anyone possesses or has any type of spam software, please 
come forward.

Yakov  

_______________________________________________
Asrg mailing list
Asrg@ietf.org
https://www1.ietf.org/mailman/listinfo/asrg