Re: [Asrg] 0. General - Administrative - for M. Wild

Brad Knowles <brad.knowles@skynet.be> Sat, 20 September 2003 01:37 UTC

Received: from www1.ietf.org (ietf.org [132.151.1.19] (may be forged)) by ietf.org (8.9.1a/8.9.1a) with ESMTP id VAA01637 for <asrg-archive@odin.ietf.org>; Fri, 19 Sep 2003 21:37:37 -0400 (EDT)
Received: from www1.ietf.org (localhost.localdomain [127.0.0.1]) by www1.ietf.org (8.12.8/8.12.8) with ESMTP id h8K1VhED020140 for <asrg-archive@odin.ietf.org>; Fri, 19 Sep 2003 21:37:16 -0400
Received: (from exim@localhost) by www1.ietf.org (8.12.8/8.12.8/Submit) id h7T6LRR4032579 for asrg-archive@odin.ietf.org; Fri, 29 Aug 2003 02:21:27 -0400
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 19saVI-0008Bd-EP for asrg-web-archive@optimus.ietf.org; Fri, 29 Aug 2003 00:04:52 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id AAA22100; Fri, 29 Aug 2003 00:04:45 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19saVF-0006pl-00; Fri, 29 Aug 2003 00:04:49 -0400
Received: from ietf.org ([132.151.1.19] helo=optimus.ietf.org) by ietf-mx with esmtp (Exim 4.12) id 19saVE-0006pi-00; Fri, 29 Aug 2003 00:04:48 -0400
Received: from localhost.localdomain ([127.0.0.1] helo=www1.ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 19sY5T-0000xf-LB; Thu, 28 Aug 2003 21:30:03 -0400
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 19sUoL-0007ZG-63 for asrg@optimus.ietf.org; Thu, 28 Aug 2003 18:00:09 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA22611 for <asrg@ietf.org>; Thu, 28 Aug 2003 18:00:02 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19sUoI-00007e-00 for asrg@ietf.org; Thu, 28 Aug 2003 18:00:06 -0400
Received: from vhost109.his.com ([216.194.225.101]) by ietf-mx with esmtp (Exim 4.12) id 19sUoH-00007b-00 for asrg@ietf.org; Thu, 28 Aug 2003 18:00:05 -0400
Received: from [10.0.1.2] (localhost.his.com [127.0.0.1]) by vhost109.his.com (8.12.6p2/8.12.3) with ESMTP id h7SLxcVX032055; Thu, 28 Aug 2003 18:00:02 -0400 (EDT) (envelope-from brad.knowles@skynet.be)
Mime-Version: 1.0
X-Sender: bs663385@pop.skynet.be
Message-Id: <a06001a6bbb742aac4f57@[10.0.1.2]>
In-Reply-To: <20030828150404.GC16712@teal.hjp.at>
References: <6.0.0.14.0.20030827092423.02730f58@solidmatrix.com> <1062057632.15835.695.camel@delta.isode.net> <20030828150404.GC16712@teal.hjp.at>
To: "Peter J. Holzer" <hjp-asrg@hjp.at>
From: Brad Knowles <brad.knowles@skynet.be>
Subject: Re: [Asrg] 0. General - Administrative - for M. Wild
Cc: asrg@ietf.org
Content-Type: text/plain; charset="us-ascii"; format="flowed"
Sender: asrg-admin@ietf.org
Errors-To: asrg-admin@ietf.org
X-BeenThere: asrg@ietf.org
X-Mailman-Version: 2.0.12
Precedence: bulk
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=unsubscribe>
List-Id: Anti-Spam Research Group - IRTF <asrg.ietf.org>
List-Post: <mailto:asrg@ietf.org>
List-Help: <mailto:asrg-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=subscribe>
List-Archive: <https://www1.ietf.org/mail-archive/working-groups/asrg/>
Date: Thu, 28 Aug 2003 23:59:29 +0200

At 5:04 PM +0200 2003/08/28, Peter J. Holzer wrote:

>  Still, I don't think there are many legitimate sites which don't have an
>  A record.  Requiring the sender to send a FQDN which resolves to the
>  sender's IP address doesn't seem unreasonable to me (even for dynamic
>  IP-Addresses, you can use dyndns.net or a similar service).

	Check the recent traffic on NANOG.  Because of stupidity on the 
part of AOL, they've been discussing this subject intensively.  I've 
been tagging 75-90% of the recent messages as input for the BCP 
review.

	In short, let me say that I used to think this was a good idea, 
but my views are in the process of changing.  Maybe we could tag and 
score on the basis of whether or not the sender's IP address has 
proper reverse DNS (or whether the sender's domain name exists in the 
DNS and/or in some sense "matches" the IP address of the incoming 
connection), but I think it would be foolish in the extreme to 
outright reject messages on this basis.

>                                                                In fact,
>  looking at my log files this seems to be a very good indicator of
>  legitimate mail servers (I checked several weeks of logs some time ago
>  and only found one legimitate server which identified itself with an
>  unresolvable name (I think the box is NATted).

	I'm NAT'ed.  Many people on NANOG appear to be in similar 
situations, or have run into them frequently.

	Just because we haven't personally experienced a particular 
situation doesn't mean that this would necessarily make itself a good 
target for filtering and outright rejection.

-- 
Brad Knowles, <brad.knowles@skynet.be>

"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
     -Benjamin Franklin, Historical Review of Pennsylvania.

GCS/IT d+(-) s:+(++)>: a C++(+++)$ UMBSHI++++$ P+>++ L+ !E-(---) W+++(--) N+
!w--- O- M++ V PS++(+++) PE- Y+(++) PGP>+++ t+(+++) 5++(+++) X++(+++) R+(+++)
tv+(+++) b+(++++) DI+(++++) D+(++) G+(++++) e++>++++ h--- r---(+++)* z(+++)

_______________________________________________
Asrg mailing list
Asrg@ietf.org
https://www1.ietf.org/mailman/listinfo/asrg