Re: [Rucus] [spitstop] Botnets, take 2... Re: Draft RUCUS charter

"Saverio Niccolini" <Saverio.Niccolini@nw.neclab.eu> Fri, 22 February 2008 12:07 UTC

Return-Path: <rucus-bounces@ietf.org>
X-Original-To: ietfarch-rucus-archive@core3.amsl.com
Delivered-To: ietfarch-rucus-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 55A5428C2F8; Fri, 22 Feb 2008 04:07:47 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.628
X-Spam-Level:
X-Spam-Status: No, score=0.628 tagged_above=-999 required=5 tests=[AWL=-1.235, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_ORG=0.611, MANGLED_SPAM=2.3, RDNS_NONE=0.1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id egOTkXWkwEva; Fri, 22 Feb 2008 04:07:46 -0800 (PST)
Received: from core3.amsl.com (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8F0CC28C298; Fri, 22 Feb 2008 04:07:46 -0800 (PST)
X-Original-To: rucus@core3.amsl.com
Delivered-To: rucus@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A520028C2F4 for <rucus@core3.amsl.com>; Fri, 22 Feb 2008 04:07:45 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cE4+QpGMQK8I for <rucus@core3.amsl.com>; Fri, 22 Feb 2008 04:07:44 -0800 (PST)
Received: from smtp0.neclab.eu (smtp0.neclab.eu [195.37.70.41]) by core3.amsl.com (Postfix) with ESMTP id 9BC0028C29E for <rucus@ietf.org>; Fri, 22 Feb 2008 04:07:44 -0800 (PST)
Received: from localhost (localhost.office [127.0.0.1]) by smtp0.neclab.eu (Postfix) with ESMTP id 6AE922C000355; Fri, 22 Feb 2008 13:07:40 +0100 (CET)
X-Virus-Scanned: Amavisd on Debian GNU/Linux (atlas2.office)
Received: from smtp0.neclab.eu ([127.0.0.1]) by localhost (atlas2.office [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1qkw5rHQIsZg; Fri, 22 Feb 2008 13:07:40 +0100 (CET)
Received: by smtp0.neclab.eu (Postfix, from userid 1001) id 59FA42C000357; Fri, 22 Feb 2008 13:07:40 +0100 (CET)
Received: from mx1.office (mx1.office [10.1.1.23]) by smtp0.neclab.eu (Postfix) with ESMTP id 1CC5D2C000355; Fri, 22 Feb 2008 13:07:30 +0100 (CET)
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Date: Fri, 22 Feb 2008 13:07:29 +0100
Message-ID: <5F6519BF2DE0404D99B7C75607FF76FF53DB88@mx1.office>
In-Reply-To: <47BEAEE3.4040701@gmx.net>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: [spitstop] [Rucus] Botnets, take 2... Re: Draft RUCUS charter
Thread-Index: Ach1RFs2RyYlR9YvTIKsWmpxvr2fTwAA9quw
References: <C3E0C78D.4346A%Quittek@nw.neclab.eu> <3A86FA4E-6D4A-43FE-B380-6676CD4BCD90@voxeo.com> <42B56C6A683EBA4581C01CB49A914CA70E6EA261@MAILFAXSRV.gfimalta.com><909E8DC8-CB3A-478D-995F-94A4B3656D8D@cs.columbia.edu> <47BEAEE3.4040701@gmx.net>
From: Saverio Niccolini <Saverio.Niccolini@nw.neclab.eu>
To: rucus@ietf.org, Signaling TO Prevent SPIT <spitstop@listserv.netlab.nec.de>
X-Sanitizer: This message has been sanitized!
Subject: Re: [Rucus] [spitstop] Botnets, take 2... Re: Draft RUCUS charter
X-BeenThere: rucus@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: <rucus.ietf.org>
List-Unsubscribe: <http://www.ietf.org/mailman/listinfo/rucus>, <mailto:rucus-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/pipermail/rucus>
List-Post: <mailto:rucus@ietf.org>
List-Help: <mailto:rucus-request@ietf.org?subject=help>
List-Subscribe: <http://www.ietf.org/mailman/listinfo/rucus>, <mailto:rucus-request@ietf.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: rucus-bounces@ietf.org
Errors-To: rucus-bounces@ietf.org

Hannes, all,

> I had a chat with Peter Saint-Andre this week and he reported 
> me about problems they had with malicious users (potentially 
> using the XMPP servers for file sharing) in their XMPP server 
> infrastructure. He told me that their community is looking 
> into a mechanism to allow one domain to report problems to 
> another domain. This would correspond to Henning's 2nd 
> category below and a mechanisms similar to the one described 
> in 
> http://www.ietf.org/internet-drafts/draft-niccolini-sipping-sp
am-feedback-00.txt
> would be useful (expect that it would not be run between the 
> end host and the VoIP provider but between two VoIP providers).

Right, actually this is why we inserted this potential communication
interface in the SPITSTOP draft, see interface "b" among providers
in:
http://tools.ietf.org/html/draft-niccolini-sipping-spitstop-01#page-6

Saverio


============================================================
Dr. Saverio Niccolini
Senior Researcher
NEC Laboratories Europe, Network Research Division	
Kurfuerstenanlage 36, D-69115 Heidelberg
Tel.     +49 (0)6221 4342-118
Fax:     +49 (0)6221 4342-155
e-mail:  saverio.niccolini@nw.neclab.eu <-- !!! NEW ADDRESS !!!
============================================================
NEC Europe Limited Registered Office: NEC House, 1 Victoria
Road, London W3 6BL Registered in England 2832014
_______________________________________________
Rucus mailing list
Rucus@ietf.org
http://www.ietf.org/mailman/listinfo/rucus