IETF Logo Mail Archive

Re: [Asrg] What are the IPs that sends mail for a domain?

Ian Eiloart <iane@sussex.ac.uk> Fri, 03 July 2009 09:22 UTC

Return-Path: <iane@sussex.ac.uk>
X-Original-To: asrg@core3.amsl.com
Delivered-To: asrg@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1876C28C133 for <asrg@core3.amsl.com>; Fri, 3 Jul 2009 02:22:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.446
X-Spam-Level:
X-Spam-Status: No, score=-2.446 tagged_above=-999 required=5 tests=[AWL=0.153, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 988LQsaIV0OY for <asrg@core3.amsl.com>; Fri, 3 Jul 2009 02:22:22 -0700 (PDT)
Received: from karpinski.uscs.susx.ac.uk (karpinski.uscs.susx.ac.uk [139.184.14.85]) by core3.amsl.com (Postfix) with ESMTP id C725D28C1E4 for <asrg@irtf.org>; Fri, 3 Jul 2009 02:22:21 -0700 (PDT)
Received: from seana-imac.staff.uscs.susx.ac.uk ([139.184.132.137]:57911) by karpinski.uscs.susx.ac.uk with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.64) (envelope-from <iane@sussex.ac.uk>) id KM78QX-000FAS-FK for asrg@irtf.org; Fri, 03 Jul 2009 10:23:21 +0100
Date: Fri, 03 Jul 2009 10:22:21 +0100
From: Ian Eiloart <iane@sussex.ac.uk>
Sender: iane@sussex.ac.uk
To: Anti-Spam Research Group - IRTF <asrg@irtf.org>
Message-ID: <45BAB0F4B7BC2DC23561EAFB@seana-imac.staff.uscs.susx.ac.uk>
In-Reply-To: <4A4CE850.60105@nortel.com>
References: <mailman.5.1245610801.29559.asrg@irtf.org> <4A3F76B8.2030409@terabites.com> <BBBA1F6A3752AE7B96888ECB@lewes.staff.uscs.susx.ac.uk> <4A48FB80.10709@billmail.scconsult.com> <800E7AE85B690B4BAC93F2CD@seana-imac.staff.uscs.susx.ac.uk> <20090630111105.GA12502@gsp.org> <DC4825E67EC4297FF587671B@seana-imac.staff.uscs.susx.ac.uk> <20090701150032.GB15652@verdi> <7ae58c220907010812s6831475fv485aa6a75baddb94@mail.gmail.com> <B615A07C0B45CC8ADA9F938A@seana-imac.staff.uscs.susx.ac.uk> <4A4CDB33.9000908@billmail.scconsult.com> <4A4CE00D.3020802@nortel.com> <99C83E3C60B16E2C2037C7C5@seana-imac.staff.uscs.susx.ac.uk> <4A4CE850.60105@nortel.com>
Originator-Info: login-token=Mulberry:01b7VK49gWuEiwIp5F29viKr1W1S1rPdLb5CA=; token_authority=support@its.sussex.ac.uk
X-Mailer: Mulberry/4.0.8 (Mac OS X)
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format="flowed"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
X-Sussex: true
X-Sussex-transport: remote_smtp
Subject: Re: [Asrg] What are the IPs that sends mail for a domain?
X-BeenThere: asrg@irtf.org
X-Mailman-Version: 2.1.9
Precedence: list
Reply-To: Anti-Spam Research Group - IRTF <asrg@irtf.org>
List-Id: Anti-Spam Research Group - IRTF <asrg.irtf.org>
List-Unsubscribe: <http://www.irtf.org/mailman/listinfo/asrg>, <mailto:asrg-request@irtf.org?subject=unsubscribe>
List-Archive: <http://www.irtf.org/mail-archive/web/asrg>
List-Post: <mailto:asrg@irtf.org>
List-Help: <mailto:asrg-request@irtf.org?subject=help>
List-Subscribe: <http://www.irtf.org/mailman/listinfo/asrg>, <mailto:asrg-request@irtf.org?subject=subscribe>
X-List-Received-Date: Fri, 03 Jul 2009 09:22:23 -0000

--On 2 July 2009 13:03:12 -0400 Chris Lewis <clewis@nortel.com> wrote:

> Ian Eiloart wrote:
>>
>> --On 2 July 2009 12:27:57 -0400 Chris Lewis <clewis@nortel.com> wrote:
>>
>>> Bill Cole wrote:
>>>> Ian Eiloart wrote, On 7/2/09 6:23 AM:
>>>>> Exercise for the reader: why aren't spammers using the @ibm.com
>>>>> domain?
>>>> You provided the answer before the question.
>>> Somewhat.  Because spammers _are_ using @ibm.com too.  I got samples ;-)
>>
>> Ok, but it's trivial to reject them after checking SPF.
>
> Don't need to.  They're all being rejected by either "no such user" or
> the spam filter rejects.
>
> SPF isn't worth the cycles nor bandwidth (in this environment at least)
> to catch the rare SPF -all.

<http://spf-all.com/>

There are a few prime domains that publish -all records.

-- 
Ian Eiloart
IT Services, University of Sussex
01273-873148 x3148
For new support requests, see http://www.sussex.ac.uk/its/help/

v2.23.0 | Report a Bug | By Email