ietf-asrg
[Top] [All Lists]

Re: [Asrg] Deprecating plain POP accounts

2003-03-05 15:12:15
  I thought that legitimate email originated only from mailers that
administrators had configured to send mail.

anybody who has a computer is potentially an administrator.

   Q: Why are open HTTP proxies allowed to relay email?

   A: Because no one at the site notices that they can send mail,
      and no one receiving the mail knows that that machine was
      not intended to send mail.

  Any mail system which allows such nonsense is broken.

why.  because you said so?  

is hotmail broken too?  it allows people to relay mail.  it doesn't know
who is really sending it.

no, it doesn't stop the spammer.  it just makes life harder for
legitimate users.

  Ah, I see.  In order for your "legitimate users" to save small
amounts of effort, you require others to accept massive volumes of
spam.

nope.  these blocks don't do much to deter the massive amounts of spam.

source IP addresses are
not authentication.  and domains have nothing to do with IP
addresses. 

  <sigh> If I want to be able to distinguish his traffic from spam,
then there must be some way for me to do that. 

well, I suppose it depends on how you define spam.  everybody has his
own definition. 

now maybe it really would be useful to be able to ask some oracle
"did the guy who sent this message also send out thousands of 
other similar messages?"  and "were there lots of complaints about
those messages?"  but that's not the same thing as blocking port 25.

  So your roaming user requires me to do extra work to filter,
qualify, or authenticate them, because the traffic doesn't originate
from the domain he claims to be sending from.

domains are just names.  traffic doesn't originate from domains.

  Can I bill you for that extra time and effort?

can I bill you for taking my time to try to explain this to you?

YOU DO NOT HAVE THE RIGHT TO INSIST THAT INTERNET TRANSPARENCY BE
CRIPPLED FOR THE SAKE OF SOME BRAIN-DAMGED IDEA THAT WILL DO NO GOOD.

is that clear enough?  that will be $100, please.

If not, why should I
care about accepting email from such broken systems?

don't accept the mail if you don't want to.  for that matter, don't
accept any mail at all.  you'll be far better off.  and so will we.


many spammers use
throwaway accounts anyway.  the fact that they are using their ISP's
SMTP server to relay spam doesn't keep them from spamming.

  That traffic is less than .01% of the spam I'm seeing.  

traffic from throwaway account is < .01% of the spam you're seeing?
well, the rest of the net is getting the other 99.99% of such traffic,
because every time I look at spam most of the sender addresses are
fairly obvously throwaways. 
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg