Re: [Shutup] [ietf-smtp] Proposed Charter for the "SMTP Headers Unhealthy To User Privacy" WG (fwd)

"John Levine" <johnl@taugh.com> Tue, 01 December 2015 17:50 UTC

Return-Path: <johnl@taugh.com>
X-Original-To: shutup@ietfa.amsl.com
Delivered-To: shutup@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 01AA71B29BB for <shutup@ietfa.amsl.com>; Tue, 1 Dec 2015 09:50:52 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 1.663
X-Spam-Level: *
X-Spam-Status: No, score=1.663 tagged_above=-999 required=5 tests=[BAYES_50=0.8, HELO_MISMATCH_COM=0.553, HOST_MISMATCH_NET=0.311, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nDV8mtMRrx6L for <shutup@ietfa.amsl.com>; Tue, 1 Dec 2015 09:50:51 -0800 (PST)
Received: from miucha.iecc.com (abusenet-1-pt.tunnel.tserv4.nyc4.ipv6.he.net [IPv6:2001:470:1f06:1126::2]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 151C51B29B2 for <shutup@ietf.org>; Tue, 1 Dec 2015 09:50:50 -0800 (PST)
Received: (qmail 64605 invoked from network); 1 Dec 2015 17:50:49 -0000
Received: from unknown (64.57.183.18) by mail1.iecc.com with QMQP; 1 Dec 2015 17:50:49 -0000
Date: 1 Dec 2015 17:50:28 -0000
Message-ID: <20151201175028.18462.qmail@ary.lan>
From: "John Levine" <johnl@taugh.com>
To: ietf-smtp@ietf.org, shutup@ietf.org
In-Reply-To: <1448990957002-8a4e2ed6-df73b97f-9b769f82@fugue.com>
Organization:
X-Headerized: yes
Mime-Version: 1.0
Content-type: text/plain; charset=utf-8
Content-transfer-encoding: 8bit
Archived-At: <http://mailarchive.ietf.org/arch/msg/shutup/1D7EizHWTmirKmD1sUjVAbXloyI>
Subject: Re: [Shutup] [ietf-smtp] Proposed Charter for the "SMTP Headers Unhealthy To User Privacy" WG (fwd)
X-BeenThere: shutup@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: SMTP Headers Unhealthy To User Privacy <shutup.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/shutup>, <mailto:shutup-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/shutup/>
List-Post: <mailto:shutup@ietf.org>
List-Help: <mailto:shutup-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/shutup>, <mailto:shutup-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 01 Dec 2015 17:50:52 -0000

>It is certainly true that if the submit server is not operated by a responsible entity, then
>we have a problem.   The right fix for that problem is probably something similar to what
>John has said AOL did in a similar situation: start greylisting mail from that provider so
>that the high rate of spam chokes their queues, and they will start to be more proactive in
>addressing problems.

Ah, OK.  As I said, AOL used the IP addresess of the naughty users,
logged in the received headers in the incoming mail, to decide what to
reject.  (It wasn't greylisting since they rejected it every time the
ISP retried.)  Without those IPs they couldn't have done it, since
they certainly weren't going to reject legitimate mail from the other
users.

I'm glad to see that we now agree that logging the submission IP
addresses provides important security benefits.

R's,
John