Re: [Rucus] [spitstop] Botnets, take 2... Re: Draft RUCUS charter

Peter Saint-Andre <stpeter@stpeter.im> Fri, 22 February 2008 12:50 UTC

Return-Path: <rucus-bounces@ietf.org>
X-Original-To: ietfarch-rucus-archive@core3.amsl.com
Delivered-To: ietfarch-rucus-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B353028C30C; Fri, 22 Feb 2008 04:50:18 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.707
X-Spam-Level:
X-Spam-Status: No, score=-0.707 tagged_above=-999 required=5 tests=[AWL=-0.270, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_ORG=0.611, RDNS_NONE=0.1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6m-e2vpuxCNA; Fri, 22 Feb 2008 04:50:09 -0800 (PST)
Received: from core3.amsl.com (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A34D928C2EA; Fri, 22 Feb 2008 04:50:09 -0800 (PST)
X-Original-To: rucus@core3.amsl.com
Delivered-To: rucus@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1B4CB3A6842 for <rucus@core3.amsl.com>; Fri, 22 Feb 2008 04:50:08 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iwdz+V0GK+M7 for <rucus@core3.amsl.com>; Fri, 22 Feb 2008 04:50:04 -0800 (PST)
Received: from dizzyd.com (dizzyd.com [207.210.219.225]) by core3.amsl.com (Postfix) with ESMTP id 4AC1E3A6885 for <rucus@ietf.org>; Fri, 22 Feb 2008 04:50:04 -0800 (PST)
Received: from roundabout.local (ip-213-49-227-39.dsl.scarlet.be [213.49.227.39]) (Authenticated sender: stpeter) by dizzyd.com (Postfix) with ESMTP id B96DF40340; Fri, 22 Feb 2008 05:49:43 -0700 (MST)
Message-ID: <47BEC4F1.9010902@stpeter.im>
Date: Fri, 22 Feb 2008 13:49:53 +0100
From: Peter Saint-Andre <stpeter@stpeter.im>
User-Agent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.8.1.9) Gecko/20071031 Thunderbird/2.0.0.9 Mnenhy/0.7.5.0
MIME-Version: 1.0
To: Hannes.Tschofenig@gmx.net
References: <C3E0C78D.4346A%Quittek@nw.neclab.eu> <3A86FA4E-6D4A-43FE-B380-6676CD4BCD90@voxeo.com> <42B56C6A683EBA4581C01CB49A914CA70E6EA261@MAILFAXSRV.gfimalta.com> <909E8DC8-CB3A-478D-995F-94A4B3656D8D@cs.columbia.edu> <47BEAEE3.4040701@gmx.net>
In-Reply-To: <47BEAEE3.4040701@gmx.net>
Cc: rucus@ietf.org, Signaling TO Prevent SPIT <spitstop@listserv.netlab.nec.de>
Subject: Re: [Rucus] [spitstop] Botnets, take 2... Re: Draft RUCUS charter
X-BeenThere: rucus@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: <rucus.ietf.org>
List-Unsubscribe: <http://www.ietf.org/mailman/listinfo/rucus>, <mailto:rucus-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/pipermail/rucus>
List-Post: <mailto:rucus@ietf.org>
List-Help: <mailto:rucus-request@ietf.org?subject=help>
List-Subscribe: <http://www.ietf.org/mailman/listinfo/rucus>, <mailto:rucus-request@ietf.org?subject=subscribe>
Content-Type: multipart/mixed; boundary="===============0918036036=="
Sender: rucus-bounces@ietf.org
Errors-To: rucus-bounces@ietf.org

Hannes Tschofenig wrote:
> I think we should put Henning's classification somewhere in our documents.
> 
> I had a chat with Peter Saint-Andre this week and he reported me about
> problems they had with malicious users (potentially using the XMPP
> servers for file sharing) in their XMPP server infrastructure. He told
> me that their community is looking into a mechanism to allow one domain
> to report problems to another domain. This would correspond to Henning's
> 2nd category below and a mechanisms similar to the one described in
> http://www.ietf.org/internet-drafts/draft-niccolini-sipping-spam-feedback-00.txt
> would be useful (expect that it would not be run between the end host
> and the VoIP provider but between two VoIP providers).

That's correct. An early version is here:

http://www.xmpp.org/extensions/inbox/error-abuse.html

> PS: I put Peter on CC in case I misunderstood something.

I'm on both spitstop and rucus, but I confess to finding the continued
sending to both lists a bit annoying. Can't we all just send to rucus
(and not spitstop) now? :)

Peter

-- 
Peter Saint-Andre
https://stpeter.im/

_______________________________________________
Rucus mailing list
Rucus@ietf.org
http://www.ietf.org/mailman/listinfo/rucus