Re: [Asrg] C/R Interworking Framework

Yakov Shafranovich <research@solidmatrix.com> Wed, 04 June 2003 23:15 UTC

Received: from www1.ietf.org (ietf.org [132.151.1.19] (may be forged)) by ietf.org (8.9.1a/8.9.1a) with ESMTP id TAA16909 for <asrg-archive@odin.ietf.org>; Wed, 4 Jun 2003 19:15:29 -0400 (EDT)
Received: (from mailnull@localhost) by www1.ietf.org (8.11.6/8.11.6) id h54NF2j29404 for asrg-archive@odin.ietf.org; Wed, 4 Jun 2003 19:15:02 -0400
Received: from ietf.org (odin.ietf.org [132.151.1.176]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h54NF2B29401 for <asrg-web-archive@optimus.ietf.org>; Wed, 4 Jun 2003 19:15:02 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id TAA16879; Wed, 4 Jun 2003 19:14:58 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19NhRO-000166-00; Wed, 04 Jun 2003 19:13:10 -0400
Received: from ietf.org ([132.151.1.19] helo=www1.ietf.org) by ietf-mx with esmtp (Exim 4.12) id 19NhRN-000163-00; Wed, 04 Jun 2003 19:13:09 -0400
Received: from www1.ietf.org (localhost.localdomain [127.0.0.1]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h54NE3B29370; Wed, 4 Jun 2003 19:14:03 -0400
Received: from ietf.org (odin.ietf.org [132.151.1.176]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h54NDsB29323 for <asrg@optimus.ietf.org>; Wed, 4 Jun 2003 19:13:54 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id TAA16836 for <asrg@ietf.org>; Wed, 4 Jun 2003 19:13:51 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19NhQJ-00015Q-00 for asrg@ietf.org; Wed, 04 Jun 2003 19:12:03 -0400
Received: from 000-234-350.area5.spcsdns.net ([68.27.154.163] helo=68.27.154.163) by ietf-mx with smtp (Exim 4.12) id 19NhQG-00015I-00 for asrg@ietf.org; Wed, 04 Jun 2003 19:12:01 -0400
Message-Id: <5.2.0.9.2.20030604191331.00b99d10@solidmatrix.com>
X-Sender: research@solidmatrix.com
X-Mailer: QUALCOMM Windows Eudora Version 5.2.0.9
To: Vernon Schryver <vjs@calcite.rhyolite.com>, asrg@ietf.org
From: Yakov Shafranovich <research@solidmatrix.com>
Subject: Re: [Asrg] C/R Interworking Framework
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format="flowed"
X-MimeHeaders-Plugin-Info: v2.03.00
X-GCMulti: 1
Sender: asrg-admin@ietf.org
Errors-To: asrg-admin@ietf.org
X-BeenThere: asrg@ietf.org
X-Mailman-Version: 2.0.12
Precedence: bulk
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=unsubscribe>
List-Id: Anti-Spam Research Group - IRTF <asrg.ietf.org>
List-Post: <mailto:asrg@ietf.org>
List-Help: <mailto:asrg-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=subscribe>
List-Archive: <https://www1.ietf.org/pipermail/asrg/>
Date: Wed, 04 Jun 2003 19:13:32 -0400

At 01:11 PM 6/4/2003 -0600, Vernon Schryver wrote:

> > From: Yakov Shafranovich <research@solidmatrix.com>
>
> > ...
> > The main problem with VRFY is that it allows the spammer to verify 
> addresses.
> > ...
>
>This is a minor issue, but pleast note that the main problem with VRFY
>is that many and perhaps most SMTP servers have it turned off.  No
>one with the faintest familiarity with how spam, spam filters, and
>even general STMP installation testing today uses VRFY.  Instead we
>all do what the spammers do many 10's of millions and perhaps billions
>of times every day.  Instead of sending the sequence of SMTP commands
>
>    HELO
>    VRFY
>
>we send
>
>    HELO
>    MAIL From
>    RCPT To
>
>The result of the second sequence is not perfect (e.g with Yahoo),
>but it is far more likely to work than the first.

However, if we are defining an SMTP process for CRI protocols, can we use 
the VRFY command as a part of an ESMTP extension?

Yakov  

_______________________________________________
Asrg mailing list
Asrg@ietf.org
https://www1.ietf.org/mailman/listinfo/asrg