ietf-asrg
[Top] [All Lists]

Re: [Asrg] honey pot plugged

2003-04-09 13:49:33


On Wed, 9 Apr 2003, Brad Spencer wrote:

At 01:43 PM 4/9/2003 -0600, John Fenley wrote:


That's open relay honeypots.  I think they heavily scan for open proxy 
honeypots.  I've never run one but I can see many advantages to the proxy 
honeypot (chief being that nowadays it's the one most likely to be 
contacted directly from the spammers system.)  The thing I push most is the 
idea: go after the abuse done to send spam.  That's where attention would 
be valuable, to my mind.  As an  individual I have little chance to do 
anything like an ISP-level approach,  have little influence to get an 
ISP-level approach going.  ASRG has the chance and the influence, if it is 
determined to be worthwhile.


Can I ask why open proxies are considered to be such a problem? It would
seem, that since no legitimate mail would come from them, they are perfect
candidates for the RBLs. Are they not fairly easy to detect and confirm?
Why wouldn't they be in any list of open relays, since that is one of the
things they do? Does legitimate mail come from them? That seems unlikely
to me. Is the problem that they are short lived? But why would that be a
problem? 

I have a feeling the answer must be obvious, but perhaps there are several
of us here who have missed the obvious.



_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg



<Prev in Thread] Current Thread [Next in Thread>