RE: [Asrg] Some data on the validity of MAIL FROM addresses

["Eric D. Williams" <[e-mail]>]

On Monday, May 19, 2003 5:50 PM, Vernon Schryver 
[SMTP:[e-mail]] wrote:
8<...>8
> That's not what I see.  About 192 or 0.6% of the last 27,972 spam
> caught by my traps had bogus sender domain names.  Since modern
> versions of sendmail and other MTAs usually require that the sender
> domain exist, the surprise is that even that small amount of spam
> has bogus sender domains.

I would like people to seriously consider this particular paragraph. It seems 
to touch on the vital issue of how 'spam' is produced in the wild and the 
automated means for its insertion into the MTS.  Whether an SMTP implementation 
is 'modern' or not is not relevant to the issue IMHO, but that is a factor in 
determining what the footprint is for the various tools and techniques are that 
are being utilized.

Has anyone done a forensic examination of 'spamware' and/or developed a 
taxonomy of its internals?
Will knowing the 'weapons' - to co-opt an analogy being proposed by some - aid 
in defeating the 'enemy'?
Are there any other 'artifacts' not directly related to the 'spam' problem, 
that can aid in determining methods to defeat 'it'?

-e
_______________________________________________
Asrg mailing list
[e-mail]
https://www1.ietf.org/mailman/listinfo/asrg