Re: [Asrg] 'GIEIS' - The Fifth Response

Steven F Siirila <sfs@tc.umn.edu> Thu, 03 July 2003 19:32 UTC

Received: from optimus.ietf.org (ietf.org [132.151.1.19] (may be forged)) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA03339 for <asrg-archive@odin.ietf.org>; Thu, 3 Jul 2003 15:32:35 -0400 (EDT)
Received: from localhost.localdomain ([127.0.0.1] helo=www1.ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 19Y9oL-000664-TL for asrg-archive@odin.ietf.org; Thu, 03 Jul 2003 15:32:06 -0400
Received: (from exim@localhost) by www1.ietf.org (8.12.8/8.12.8/Submit) id h63JW5gG023437 for asrg-archive@odin.ietf.org; Thu, 3 Jul 2003 15:32:05 -0400
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 19Y9oL-00065w-Ne for asrg-web-archive@optimus.ietf.org; Thu, 03 Jul 2003 15:32:05 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA03324; Thu, 3 Jul 2003 15:32:04 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19Y9oK-00007E-00; Thu, 03 Jul 2003 15:32:04 -0400
Received: from ietf.org ([132.151.1.19] helo=optimus.ietf.org) by ietf-mx with esmtp (Exim 4.12) id 19Y9oJ-00007B-00; Thu, 03 Jul 2003 15:32:03 -0400
Received: from localhost.localdomain ([127.0.0.1] helo=www1.ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 19Y9oI-00063r-8Y; Thu, 03 Jul 2003 15:32:02 -0400
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by optimus.ietf.org with esmtp (Exim 4.20) id 19Y9nm-0005zN-5i for asrg@optimus.ietf.org; Thu, 03 Jul 2003 15:31:30 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA03283 for <asrg@ietf.org>; Thu, 3 Jul 2003 15:31:28 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19Y9nk-00006I-00 for asrg@ietf.org; Thu, 03 Jul 2003 15:31:28 -0400
Received: from earth.tc.umn.edu ([160.94.5.5]) by ietf-mx with esmtp (Exim 4.12) id 19Y9nj-00006B-00 for asrg@ietf.org; Thu, 03 Jul 2003 15:31:28 -0400
Received: by earth.tc.umn.edu; Thu, 3 Jul 2003 14:31:19 -0500
From: Steven F Siirila <sfs@tc.umn.edu>
To: Mark McCarron <markmccarron_itt@hotmail.com>
Cc: asrg@ietf.org
Subject: Re: [Asrg] 'GIEIS' - The Fifth Response
Message-ID: <20030703193119.GA28049@earth.tc.umn.edu>
References: <BAY8-F112cK8r6beUzm00031f16@hotmail.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <BAY8-F112cK8r6beUzm00031f16@hotmail.com>
User-Agent: Mutt/1.4.1i
Sender: asrg-admin@ietf.org
Errors-To: asrg-admin@ietf.org
X-BeenThere: asrg@ietf.org
X-Mailman-Version: 2.0.12
Precedence: bulk
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=unsubscribe>
List-Id: Anti-Spam Research Group - IRTF <asrg.ietf.org>
List-Post: <mailto:asrg@ietf.org>
List-Help: <mailto:asrg-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=subscribe>
List-Archive: <https://www1.ietf.org/pipermail/asrg/>
Date: Thu, 03 Jul 2003 14:31:19 -0500

On Thu, Jul 03, 2003 at 07:05:56PM +0000, Mark McCarron wrote:
> 
> >>    (1) In the short to medium term
> >>
> >>     Devise a method of reasonably reliably identifying bulk spam,
> >>     UCE or UBE and levying a charge on the senders (via any of their
> >>     upstream carriers, financial pain having the properties that it
> >>     does) which approaches that of any other method of commercial
> >>     or non-private bulk message delivery and most of the TECHNICAL
> >>     NETWORKING problems associated with spam - which are almost
> >>     entirely due intractable volumes of traffic - would rapidly
> >>     disappear.
> >>
> >> Mark's Response:
> >>
> >> The problem with this suggestion is that spammers are difficult to
> >> trace and even when traced there lacks the proper legal frameworks
> >> to do much about it.
> >
> >
> >Spammers are only difficult to trace because there has been, until
> >recently, little incentive to trace them and no sanctions placed
> >on any injection points (which certainly can do most of the
> >necessary tracing if well configured) for failure to do so.
> 
> 
> Mark's Response:
> 
> No.  The Internet crosses many legal boundries across the planet.  With 
> anonymous connections such as those by proxy (SOCKS, HTTP, etc) and those 
> by extensive proxy chains, simply back-tracing a tranmission is a legal 
> nightmare.  Imagine attempting to get server logs from 40 or 50 different 
> countries and then not even being guarenteed that the culprit is still 
> there at the end of it all.  'GIEIS' would eliminate the need for all of 
> this.

So would simply requiring reverse DNS as well as a record indicating whether
or not an IP address has been designated as an MTA.  This would make all of
the open proxies, hacked desktops, and dynamic IP ranges unable to send mail
directly to a site's MX server, forcing them to use an ISP's SMTP gateway.
What you would have left is legitimate MTAs (some of which may be open relays).
This is essentially where we are headed at our site by putting these sorts of
things into place gradually.
-- 

Steven F. Siirila			Office: Lind Hall, Room 130B
Internet Services			E-mail: sfs@umn.edu
Office of Information Technology	Voice: (612) 626-0244
University of Minnesota

_______________________________________________
Asrg mailing list
Asrg@ietf.org
https://www1.ietf.org/mailman/listinfo/asrg