ietf-asrg
[Top] [All Lists]

Re: FW: [Asrg] 0. General

2003-10-24 11:10:50
On Fri, Oct 24, 2003 at 01:20:33AM -0400, David Maxwell wrote:
No, you haven't thought that statement through.

Sure I have.

Every decent SMTP MTA adds a 'Received-by:' header, which includes the
IP of the host that made the SMTP connection. Even open relay MTAs add
this, so you'll still have the IP of the sender of the email.

No, you have the IP of the host that injected it to the first MTA that
recorded Received: headers.
This may be the host that injected the message. This may be 127.0.0.1 or
this may be the IP of an open proxy that made the connection to the
SMTP port.

In your original message, Message-ID: 
<20031023183955(_dot_)GD18651(_at_)Space(_dot_)Net>
you said:
Which is worthless if it was injected via an open relay.
                                               ----------
I replied about open relays, and even said (included below) that if you
want to talk about open _proxy servers_ that that is a different
discussion, and that I agree that it's a problem.

If you want to talk about open Proxy servers, or owned machines, that's
a different discussion, but in any case, if someone chooses to support
DRIP/RMX/whatever for their domain, and they list their open-relay MTA
as a server for their domain, then you'll probably want to blacklist
them ;-)

About 95% of the spam we receive is from open proxy servers. Take a look at
    http://darkwing.uoregon.edu/~joe/total-open-proxies.gif
They had 450000 already back in July.
So this is not a different discussion, it is /the/ discussion.

Open relays and open proxies are different discussions with regard to
whether a 'useful' IP address will have been included in message
headers. For relays, it will, for proxies, it won't.

                                                        David


_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg



<Prev in Thread] Current Thread [Next in Thread>