Re: [Asrg] Good versus bad (was Re: RMX Records )

"Chris Lewis" <clewis@nortelnetworks.com> Sat, 08 March 2003 16:34 UTC

Received: from www1.ietf.org (ietf.org [132.151.1.19] (may be forged)) by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA17026 for <asrg-archive@odin.ietf.org>; Sat, 8 Mar 2003 11:34:36 -0500 (EST)
Received: (from mailnull@localhost) by www1.ietf.org (8.11.6/8.11.6) id h28Gkd514700 for asrg-archive@odin.ietf.org; Sat, 8 Mar 2003 11:46:39 -0500
Received: from ietf.org (odin.ietf.org [132.151.1.176]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h28GkdO14697 for <asrg-web-archive@optimus.ietf.org>; Sat, 8 Mar 2003 11:46:39 -0500
Received: from www1.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA16896 for <asrg-web-archive@ietf.org>; Sat, 8 Mar 2003 11:34:05 -0500 (EST)
Received: from www1.ietf.org (localhost.localdomain [127.0.0.1]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h28Gj4O14620; Sat, 8 Mar 2003 11:45:04 -0500
Received: from ietf.org (odin.ietf.org [132.151.1.176]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h28GipO14583 for <asrg@optimus.ietf.org>; Sat, 8 Mar 2003 11:44:51 -0500
Received: from zcars04f.nortelnetworks.com (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA16509 for <asrg@ietf.org>; Sat, 8 Mar 2003 11:32:16 -0500 (EST)
Received: from zcard309.ca.nortel.com (zcard309.ca.nortel.com [47.129.242.69]) by zcars04f.nortelnetworks.com (Switch-2.2.5/Switch-2.2.0) with ESMTP id h28GYJ524251 for <asrg@ietf.org>; Sat, 8 Mar 2003 11:34:19 -0500 (EST)
Received: from zcard031.ca.nortel.com ([47.129.242.121]) by zcard309.ca.nortel.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13) id GDF44VFX; Sat, 8 Mar 2003 11:34:20 -0500
Received: from americasm01.nt.com (acart523.ca.nortel.com [47.129.10.238]) by zcard031.ca.nortel.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13) id G3JBF9GC; Sat, 8 Mar 2003 11:34:19 -0500
Message-ID: <3E6A1C49.2010804@americasm01.nt.com>
X-Sybari-Space: 00000000 00000000 00000000
From: Chris Lewis <clewis@nortelnetworks.com>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.0.2) Gecko/20021120 Netscape/7.01
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: asrg@ietf.org
Subject: Re: [Asrg] Good versus bad (was Re: RMX Records )
References: <E18qYxr-0003gl-00@mail.nitros9.org> <3E665320.1030004@americasm01.nt.com> <Pine.LNX.4.53.0303051455280.4869@shishi.roaringpenguin.com>
Content-Type: text/plain; charset="us-ascii"; format="flowed"
Content-Transfer-Encoding: 7bit
Content-Transfer-Encoding: 7bit
Sender: asrg-admin@ietf.org
Errors-To: asrg-admin@ietf.org
X-BeenThere: asrg@ietf.org
X-Mailman-Version: 2.0.12
Precedence: bulk
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=unsubscribe>
List-Id: Anti-Spam Research Group - IRTF <asrg.ietf.org>
List-Post: <mailto:asrg@ietf.org>
List-Help: <mailto:asrg-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=subscribe>
List-Archive: <https://www1.ietf.org/pipermail/asrg/>
Date: Sat, 08 Mar 2003 11:37:29 -0500
Content-Transfer-Encoding: 7bit
Content-Transfer-Encoding: 7bit

David F. Skoll wrote:
 > On Wed, 5 Mar 2003, Chris Lewis wrote:

 >>Alan knows of what he speaks.
 >>See http://striker.ottawa.on.ca

 > I have a hard time believing that's typical, except for large
 > companies and ISP's.

Nobody's suggesting it's typical.  It's just where we're all headed if
we don't put on the brakes.

There are plenty of reports of in-the-ballpark-comparable experiences
with much smaller organizations.

Striker is, admittedly, a far out case, where it looks like a single
spammer malfunction has led to a continuous and unstoppable DDOS.

On the other hand, our spamtrap metrics are what a, say,
long-existing[+] 100,000[*] user company looks like after 18+ months of
turning off the deliverability of the domain. Imagine if it was an ISP
with considerably higher turnover and similarly long life.  100,000
users is a _small_ provider in comparison to moderate to large ISPs...
AOL blocks three and a half orders of magnitude more spam than our
spamtrap represents...

[*] for reasons I won't go into here, what was a 10,000 employee company
probably looked like a 100,000-seat ISP on the Internet in terms of
proliferation of email addresses.  Thank god we got rid of that mess.

[+] long-existing?  Consider: the domain behind that spamtrap was in the
game early enough to get a class A with no questions asked.


_______________________________________________
Asrg mailing list
Asrg@ietf.org
https://www1.ietf.org/mailman/listinfo/asrg