ietf-mxcomp
[Top] [All Lists]

Re: MTAmark (was: Reality check please)

2004-06-11 09:36:29

I don't see how the ill founded beleive that isps do not care or react is
relevant.

If they do not react they will not implement anything.

If the isps are ignoring you it may bebecause you approach them wrong. I
know many who hate antispam zealots more than spammers, and with good cause.

I have people pulling phising web sites 24 hours a day. They get atention,
the sites are pulled in an hour or less with great consistency.

I could tel you how but you would not beleive me


 -----Original Message-----
From:   Claus Assmann [mailto:ietf-mxcomp(_at_)esmtp(_dot_)org]
Sent:   Thu Jun 10 21:51:46 2004
To:     IETF MARID WG
Subject:        Re: MTAmark (was: Reality check please)


On Thu, Jun 10, 2004, Hallam-Baker, Phillip wrote:

[please don't send me a copy of mailing list replies]

I am talking to certain ISPs about technology that would assist in
tracking down zombies that is similar to MTAMARK. I have had some
very favorable responses.

I don't want to track down zombies. I want to block them.

I am unable to support MTAMARK because the present proposal is 
incoherent. If I control an IP address I can block port 25, so why
would anyone implement a rube goldberg scheme that allows me
to say 'i should have blocked port 25 but did not'?

So why don't do they block access to port 25?  Using DNS they can
delegate control, blocking it in their routers causes maintainance
problems (and maybe performance problems?)

According to some news reports it would simply cost them too much
money to deal with the support issues. Or to quote one ISP: "Spammers
are customers too". Maybe ISPs care only about inbound spam because
their customers complain, but outbound spam is "only" a problem for
someone else?

Ask the ISPs to do something coherent such as using the reverse
DNS to advertise contact addresses, abuse notification mechanisms,

Since when do ISPs do something about abuse reports? The most I get
is an auto-response when I tell them about spammers/abused machines
on their DSL/cable connections. Are there actually ISPs that cut
off infected machines? If so, why does 80% of the spam still come
from spam zombies?