ietf-asrg
[Top] [All Lists]

Re: False positives (was Re: [Asrg] Re: RMX Records)

2003-03-07 07:37:07
"Chris Lewis" <clewis(_at_)nortelnetworks(_dot_)com> wrote:
To be completely fair, Alan, the problem you're having with Striker 
isn't a technical one, and it's nothing that a discussion list of this 
sort can do anything about.

  I'm not so sure.  I have a few paragraphs of text around about "Why
SMTP is different".  The summary is that the design of the protocol
opens it up to more abuse than other protocols.  Other protocols have
some parts of SMTP's problems, but not all.  That's what makes SMTP
different.

  - Connections to servers can be from any IP
  - clients can claim to be anyone
  - clients can forward data to nearly anyone
    (even without open relays.  I can hit you, personally, through
     Nortel's SMTP servers)
  - servers can amplify the problem
    (I send Nortels' SMTP server, or an open relay one message
     with 100 RCTP TO's.)

  Fixing many of these protocol problems will minimize SMTP abuse, and
minimize the side-effects of that abuse.

Striker and our spamtrap are _far_ outside of the bounds of technical 
solutions.

  The main problem I see is the "thundering herd".  I believe that
protocol/network changes can help to alleviate this problem.  It may
not be fixed today, tomorrow, or even next year.  But that's what a
research group is for.

  Alan DeKok.
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg



<Prev in Thread] Current Thread [Next in Thread>