[Asrg] Re: SPF abused by spammers

Frank Ellermann <nobody@xyzzy.claranet.de> Fri, 10 September 2004 14:33 UTC

Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA01423 for <asrg-web-archive@ietf.org>; Fri, 10 Sep 2004 10:33:27 -0400 (EDT)
Received: from megatron.ietf.org ([132.151.6.71]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1C5mX1-0007hv-Ns for asrg-web-archive@ietf.org; Fri, 10 Sep 2004 10:37:43 -0400
Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1C5mEr-0003he-K8; Fri, 10 Sep 2004 10:18:57 -0400
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1C5m91-0001Y2-1p for asrg@megatron.ietf.org; Fri, 10 Sep 2004 10:12:55 -0400
Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA28949 for <asrg@ietf.org>; Fri, 10 Sep 2004 10:12:52 -0400 (EDT)
Received: from main.gmane.org ([80.91.224.249]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1C5mD2-0007EE-0l for asrg@ietf.org; Fri, 10 Sep 2004 10:17:08 -0400
Received: from list by main.gmane.org with local (Exim 3.35 #1 (Debian)) id 1C5m8o-0002eT-00 for <asrg@ietf.org>; Fri, 10 Sep 2004 16:12:42 +0200
Received: from c-134-92-136.hh.dial.de.ignite.net ([62.134.92.136]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for <asrg@ietf.org>; Fri, 10 Sep 2004 16:12:42 +0200
Received: from nobody by c-134-92-136.hh.dial.de.ignite.net with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for <asrg@ietf.org>; Fri, 10 Sep 2004 16:12:42 +0200
X-Injected-Via-Gmane: http://gmane.org/
To: asrg@ietf.org
From: Frank Ellermann <nobody@xyzzy.claranet.de>
Date: Fri, 10 Sep 2004 16:05:47 +0200
Organization: <URL:http://purl.net/xyzzy>
Lines: 35
Message-ID: <4141B4BA.5AE2@xyzzy.claranet.de>
References: <200409091620.i89GKbd39355@shedevil.annepmitchell.com> <44CFA5B6-027D-11D9-8DB5-000A95AC5778@isipp.com> <20040909212536.GH44802@Space.Net>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Complaints-To: usenet@sea.gmane.org
X-Gmane-NNTP-Posting-Host: c-134-92-136.hh.dial.de.ignite.net
X-Mailer: Mozilla 3.0 (OS/2; U)
X-Spam-Score: 0.1 (/)
X-Scan-Signature: 52e1467c2184c31006318542db5614d5
Content-Transfer-Encoding: 7bit
Subject: [Asrg] Re: SPF abused by spammers
X-BeenThere: asrg@ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Anti-Spam Research Group - IRTF <asrg.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www1.ietf.org/pipermail/asrg>
List-Post: <mailto:asrg@ietf.org>
List-Help: <mailto:asrg-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=subscribe>
Sender: asrg-bounces@ietf.org
Errors-To: asrg-bounces@ietf.org
X-Spam-Score: 0.1 (/)
X-Scan-Signature: e1e48a527f609d1be2bc8d8a70eb76cb
Content-Transfer-Encoding: 7bit

Markus Stumpf wrote:

> Microsoft claims IPR (which they did even before the group
> was chartered, btw, but everyone ignored it).

Not really,  May 20: draft-atkinson-callerid-00 published.
May 21: ASRG co-chair resigns.  May 22: IPR complaint filed.

> We have a second trump card, we play ... SPF. Tataaaa.

Sure, there's nothing wrong with spf2.0/mailfrom as long as
you don't confuse it with the FUSSP.  In theory spf2.0/pra
could also make sense if they fix their "patented" algorithm
to read four mail headers for some common cases.

> We still don't have "the anti spam solution", but hey,
> who cares or realizes this.

I care.  Back to zero bounces / out-of-office / vacation /
challenges / broken NDRs / Symantec announcing its ignorance
to the e-mail world at large / etc. per day as it was in 2003.

Instead of 1000 useless mails caused by forgeries per day.
You need a modem account and a catch-all vanity host to feel
the difference.

> everyone always says "this is the way to go", so nobody
> asks where the way will really lead to.

Again not really.  I still like your MTAMARK idea, and it's
also very interesting to watch SURBL.  And even C/R systems
could work in combination with a spf2.0/mailfrom PASS.

                          Bye, Frank



_______________________________________________
Asrg mailing list
Asrg@ietf.org
https://www1.ietf.org/mailman/listinfo/asrg