ietf-asrg
[Top] [All Lists]

RE: [Asrg] Some data on the validity of MAIL FROM addresses

2003-05-20 21:36:12
On Monday, May 19, 2003 5:50 PM, Vernon Schryver 
[SMTP:vjs(_at_)calcite(_dot_)rhyolite(_dot_)com] wrote:
8<...>8
That's not what I see.  About 192 or 0.6% of the last 27,972 spam
caught by my traps had bogus sender domain names.  Since modern
versions of sendmail and other MTAs usually require that the sender
domain exist, the surprise is that even that small amount of spam
has bogus sender domains.

I would like people to seriously consider this particular paragraph. It seems 
to touch on the vital issue of how 'spam' is produced in the wild and the 
automated means for its insertion into the MTS.  Whether an SMTP implementation 
is 'modern' or not is not relevant to the issue IMHO, but that is a factor in 
determining what the footprint is for the various tools and techniques are that 
are being utilized.

Has anyone done a forensic examination of 'spamware' and/or developed a 
taxonomy of its internals?
Will knowing the 'weapons' - to co-opt an analogy being proposed by some - aid 
in defeating the 'enemy'?
Are there any other 'artifacts' not directly related to the 'spam' problem, 
that can aid in determining methods to defeat 'it'?

-e
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg



<Prev in Thread] Current Thread [Next in Thread>