Re: [DNSOP] I-D Action: draft-ietf-dnsop-isp-ip6rdns-03.txt

Philip Homburg <pch-dnsop-2@u-1.phicoh.com> Sun, 14 May 2017 10:16 UTC

Return-Path: <pch-b7900FA3D@u-1.phicoh.com>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4ED19129B08 for <dnsop@ietfa.amsl.com>; Sun, 14 May 2017 03:16:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.8
X-Spam-Level:
X-Spam-Status: No, score=0.8 tagged_above=-999 required=5 tests=[BAYES_50=0.8] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id K8FzCGKqYXhd for <dnsop@ietfa.amsl.com>; Sun, 14 May 2017 03:16:22 -0700 (PDT)
Received: from stereo.hq.phicoh.net (stereo6-tun.hq.phicoh.net [IPv6:2001:888:1044:10:2a0:c9ff:fe9f:17a9]) by ietfa.amsl.com (Postfix) with ESMTP id 01444129B17 for <dnsop@ietf.org>; Sun, 14 May 2017 03:14:29 -0700 (PDT)
Received: from stereo.hq.phicoh.net (localhost [::ffff:127.0.0.1]) by stereo.hq.phicoh.net with esmtp (Smail #130) id m1d9qWq-0000DcC; Sun, 14 May 2017 12:13:32 +0200
Message-Id: <m1d9qWq-0000DcC@stereo.hq.phicoh.net>
To: dnsop@ietf.org
Cc: Lee Howard <lee@asgard.org>
From: Philip Homburg <pch-dnsop-2@u-1.phicoh.com>
Sender: pch-b7900FA3D@u-1.phicoh.com
References: <20170511165852.34338.qmail@ary.lan> <59149F29.6090908@redbarn.org> <D53B1CFE.7AE7E%lee@asgard.org>
In-reply-to: Your message of "Fri, 12 May 2017 08:16:42 -0400 ." <D53B1CFE.7AE7E%lee@asgard.org>
Date: Sun, 14 May 2017 12:13:30 +0200
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/oPpml9IbUw-cOT20jXdMbdOTeGI>
Subject: Re: [DNSOP] I-D Action: draft-ietf-dnsop-isp-ip6rdns-03.txt
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 14 May 2017 10:16:24 -0000

>>we will never know, because every v6 end system will have a ptr, either
>>naturally, or machine-generated for it, because v6 providers will not
>>want their rank-and-file v6 endsystems to be excluded from important
>>activities such as transmitting e-mail.
>
>If =B3v6 provider=B2 includes =B3residential ISP=B2 (the topic and audience=
> for
>this draft), then the inability to transmit email is by design.
>That is: ISPs commonly prevent residential users from sending email (by
>default). They say this in their Terms of Service, they block port 25, and
>they don=B9t publish PTRs. This is consistent with recommendations by
>M3AAWG[1] and BITAG[2], for instance.

>People who run mail servers generally understand these limitations. The
>BITAG paper does recommend clear disclosure and methods to opt-out. Makes
>sense to me: I want a human decided they want their system to send mail,
>not a bot.

I wonder if with the EU netneutrality laws it is possible to have a blanket 
block if port 25 outbound. 

Historically, many ISP that wanted to upsell business accounts would
actually block port 25 inbound. Which does prevent relays but not bots
sending spam.

Of course having an option where the customer can request to port to be
opened and then have it closed by default is best. But that may be too
expensive for many ISPs.

But my goal was not to say something about whether port 25 should be
blocked or not. But just that based on todays internet and spam filtering,
if an ISP allows customers to send mail, then the ISP has to provide
the customer with a way of setting up reverse DNS.

I don't really care whether a reverse DNS check is good or bad when it
comes to filtering spam. It is just a reality that enough parties are
using such checks that without reverse DNS you have a serious issue
getting mail delivered.