Re: RE: [Asrg] Some data on the validity of MAIL FROM addresses

Kee Hinckley <nazgul@somewhere.com> Tue, 20 May 2003 18:18 UTC

Received: from www1.ietf.org (ietf.org [132.151.1.19] (may be forged)) by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA23861 for <asrg-archive@odin.ietf.org>; Tue, 20 May 2003 14:18:07 -0400 (EDT)
Received: (from mailnull@localhost) by www1.ietf.org (8.11.6/8.11.6) id h4KHiWM22287 for asrg-archive@odin.ietf.org; Tue, 20 May 2003 13:44:32 -0400
Received: from ietf.org (odin.ietf.org [132.151.1.176]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h4KHiWB22284 for <asrg-web-archive@optimus.ietf.org>; Tue, 20 May 2003 13:44:32 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA23853; Tue, 20 May 2003 14:17:37 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19IBer-0007Qt-00; Tue, 20 May 2003 14:16:17 -0400
Received: from ietf.org ([132.151.1.19] helo=www1.ietf.org) by ietf-mx with esmtp (Exim 4.12) id 19IBeq-0007Qq-00; Tue, 20 May 2003 14:16:16 -0400
Received: from www1.ietf.org (localhost.localdomain [127.0.0.1]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h4KHc7B21856; Tue, 20 May 2003 13:38:07 -0400
Received: from ietf.org (odin.ietf.org [132.151.1.176]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h4KHbhB21685 for <asrg@optimus.ietf.org>; Tue, 20 May 2003 13:37:43 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA23570 for <asrg@ietf.org>; Tue, 20 May 2003 14:10:47 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19IBYF-0007N2-00 for asrg@ietf.org; Tue, 20 May 2003 14:09:27 -0400
Received: from www.somewhere.com ([66.92.72.194] helo=somewhere.com) by ietf-mx with esmtp (Exim 4.12) id 19IBYF-0007My-00 for asrg@ietf.org; Tue, 20 May 2003 14:09:27 -0400
Received: from [66.92.72.194] (account nazgul HELO [192.168.1.104]) by somewhere.com (CommuniGate Pro SMTP 3.5.7) with ESMTP-TLS id 2370876; Tue, 20 May 2003 13:10:43 -0500
Mime-Version: 1.0
X-Sender: nazgul@somewhere.com@pop.messagefire.com
Message-Id: <p06001309baf01ddc480e@[192.168.1.104]>
In-Reply-To: <E19I9t2-00075U-00@argon.connect.org.uk>
References: <E19I9t2-00075U-00@argon.connect.org.uk>
To: Jon Kyme <jrk@merseymail.com>
From: Kee Hinckley <nazgul@somewhere.com>
Subject: Re: RE: [Asrg] Some data on the validity of MAIL FROM addresses
Cc: ASRG <asrg@ietf.org>
Content-Type: text/plain; charset="us-ascii"; format="flowed"
Sender: asrg-admin@ietf.org
Errors-To: asrg-admin@ietf.org
X-BeenThere: asrg@ietf.org
X-Mailman-Version: 2.0.12
Precedence: bulk
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=unsubscribe>
List-Id: Anti-Spam Research Group - IRTF <asrg.ietf.org>
List-Post: <mailto:asrg@ietf.org>
List-Help: <mailto:asrg-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=subscribe>
List-Archive: <https://www1.ietf.org/pipermail/asrg/>
Date: Tue, 20 May 2003 14:04:57 -0400

At 5:22 PM +0100 5/20/03, Jon Kyme wrote:
>  > At 4:25 PM +0100 5/20/03, Jon Kyme wrote:
>>  >Sorry, what? Your justification for not doing BCP is that it's
>>  >"non-trivial" to do it on the software you've chosen?
>>
>>
>>  There are far more reasons to choose a piece of software than just
>>  it's external interface.
>
>I can't imagine a good technical reason for picking software that makes it
>practically impossible to do the job to the same standard as BCP, given the
>choice that exists.

Well, I replied off list because I didn't think this was on topic. 
But I'm just pointing out that we're looking at this from a problem 
of how mail systems interoperate with each other.  When you're in a 
company buying a mail system, your concerns are:
	- ease of maintenance
	- ease of use for users
	- functionality for users
	- how it works with other systems
The order may vary, but the last one is almost always going to be 
last.  Furthermore, it *looks* like a check-off item.  That fact that 
some mail systems "don't play well with others" doesn't come out 
until it's *way* too late.

>Anyway (back to the original point), Hotmail seems to do better than Yahoo
>on the specific issue (response to RCPT TO <non-existent-rcpt>) we were
>discussing. It's clear that some operators can do this on very large
>distributed systems. Others can't - or won't.

It could well be a "won't".  By deferring the reject until after the 
DATA command you make it very difficult to probe for valid addresses 
to spam.
-- 
Kee Hinckley
http://www.messagefire.com/          Junk-Free Email Filtering
http://commons.somewhere.com/buzz/   Writings on Technology and Society

I'm not sure which upsets me more: that people are so unwilling to accept
responsibility for their own actions, or that they are so eager to regulate
everyone else's.
_______________________________________________
Asrg mailing list
Asrg@ietf.org
https://www1.ietf.org/mailman/listinfo/asrg