Re: [Asrg] Statistical Analysis shows SPF should work Pretty Well

Yakov Shafranovich <research@solidmatrix.com> Fri, 13 June 2003 07:21 UTC

Received: from www1.ietf.org (ietf.org [132.151.1.19] (may be forged)) by ietf.org (8.9.1a/8.9.1a) with ESMTP id DAA23746 for <asrg-archive@odin.ietf.org>; Fri, 13 Jun 2003 03:21:30 -0400 (EDT)
Received: (from mailnull@localhost) by www1.ietf.org (8.11.6/8.11.6) id h5D7L1413475 for asrg-archive@odin.ietf.org; Fri, 13 Jun 2003 03:21:01 -0400
Received: from ietf.org (odin.ietf.org [132.151.1.176]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h5D7L1m13472 for <asrg-web-archive@optimus.ietf.org>; Fri, 13 Jun 2003 03:21:01 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id DAA23734; Fri, 13 Jun 2003 03:21:00 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19Qipo-0002Ir-00; Fri, 13 Jun 2003 03:18:52 -0400
Received: from ietf.org ([132.151.1.19] helo=www1.ietf.org) by ietf-mx with esmtp (Exim 4.12) id 19Qipn-0002Io-00; Fri, 13 Jun 2003 03:18:51 -0400
Received: from www1.ietf.org (localhost.localdomain [127.0.0.1]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h5D5o1a27651; Fri, 13 Jun 2003 01:50:01 -0400
Received: from ietf.org (odin.ietf.org [132.151.1.176]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h5D5nYm27622 for <asrg@optimus.ietf.org>; Fri, 13 Jun 2003 01:49:34 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id BAA09839 for <asrg@ietf.org>; Fri, 13 Jun 2003 01:49:32 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19QhPH-0001RE-00 for asrg@ietf.org; Fri, 13 Jun 2003 01:47:23 -0400
Received: from 000-258-487.area7.spcsdns.net ([68.27.249.170] helo=68.27.249.170 ident=trilluser) by ietf-mx with smtp (Exim 4.12) id 19QhPE-0001R4-00 for asrg@ietf.org; Fri, 13 Jun 2003 01:47:21 -0400
Message-Id: <5.2.0.9.2.20030613014413.00b9d768@solidmatrix.com>
X-Sender: research@solidmatrix.com
X-Mailer: QUALCOMM Windows Eudora Version 5.2.0.9
To: Kee Hinckley <nazgul@somewhere.com>, mengwong@dumbo.pobox.com
From: Yakov Shafranovich <research@solidmatrix.com>
Subject: Re: [Asrg] Statistical Analysis shows SPF should work Pretty Well
Cc: asrg@ietf.org
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format="flowed"
X-MimeHeaders-Plugin-Info: v2.03.00
X-GCMulti: 1
Sender: asrg-admin@ietf.org
Errors-To: asrg-admin@ietf.org
X-BeenThere: asrg@ietf.org
X-Mailman-Version: 2.0.12
Precedence: bulk
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=unsubscribe>
List-Id: Anti-Spam Research Group - IRTF <asrg.ietf.org>
List-Post: <mailto:asrg@ietf.org>
List-Help: <mailto:asrg-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=subscribe>
List-Archive: <https://www1.ietf.org/pipermail/asrg/>
Date: Fri, 13 Jun 2003 01:44:14 -0400

At 11:06 PM 6/12/2003 -0400, Kee Hinckley wrote:

>At 4:24 PM -0400 6/12/03, Meng Weng Wong wrote:
>>Conclusion 2: Client IPs whose PTR do not match their sender domains are
>>more likely to be spam than not.
>>
>>But that means a scheme like SPF/DMP/RMX should work nicely.
>
>As would turning off your mail server.
>How many false positives would such a scheme result in?
>--
>Kee Hinckley
>http://www.messagefire.com/         Anti-Spam Service for your POP Account
>http://commons.somewhere.com/buzz/  Writings on Technology and Society
>
>I'm not sure which upsets me more: that people are so unwilling to accept
>responsibility for their own actions, or that they are so eager to regulate
>everyone else's.

Meng,

Do you have some data on false positives?  

_______________________________________________
Asrg mailing list
Asrg@ietf.org
https://www1.ietf.org/mailman/listinfo/asrg