"Bill Mcinnis" <bill(_dot_)mcinnis(_at_)messagelevel(_dot_)com> wrote:
Regardless of which route you go, you need to
establish some sort of message level info in a queryable form,
something will need to keep track of who sent what, from where.
Once you have set that up, why not just use that check to validate
if a message came from where it said it did, by going back to the
purported originating system and see if they have the origination
record.
So why can't the spammer-controlled box lie about that (or, actually,
tell the truth)? Some spamware uses the DNS or rDNS of the box it
runs on as its HELO string even now.
Seth
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg