You missed one more piece of information in the notification: a
limited subject header summarizing the contents.
A wonderful place to put a spam message and URL.
1) Your regular contacts will typically be in the allowed class. If
you see a notification from your regular contact that is in the
unclassified folder, it is easy to tell it is a faked message and you
need not spend time on it.
This statement is not generally true. For example, the IP addresses of the
sending site's MTAs may have changed, or the sender may be roaming.
2) For the other legitimate senders that are not in your allowed
class, how often you hear from them?
These kinds of messages are frequently extremely valuable.
It is possible that instead of relying on RMTA to record the SMTA IP
address, we can do a DNS MX lookup of sender email address to get the
MTA IP address at the sender side. However, this indeed means that if
sender side uses different MTA servers for incoming and outgoing
messages, they need to be in sync about state of outgoing message queue
(for example, shared file systems).
Gee, that's a good idea. Imagine a shared filesystem supporting the whole
email infrastructure for millions of customers!
Tony.
--
f.a.n.finch <dot(_at_)dotat(_dot_)at> http://dotat.at/
BISCAY: WEST 5 OR 6 BECOMING VARIABLE 3 OR 4. SHOWERS AT FIRST. MODERATE OR
GOOD.
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg