ietf
[Top] [All Lists]

RE: spam

2003-05-27 17:03:53


--On Wednesday, 28 May, 2003 00:01 +0200 "Fam. van den Berg" <inanbe(_at_)xs4all(_dot_)nl> wrote:

Just a simple question: Can spam mail be caused by violating
RFC 2821?

Michel asked what you mean by "violating". I would add, and what do you mean by "caused"?

If I may guess at the question...

It is the case that most spam email that I've looked at recently is non-comformant to RFC2821 in one detail or another, usually in the order of Received fields as they try to fake those data, rather than in the envelope (serious protocol violations in the envelope typically result in non-delivery). But there is little or no evidence that even optimally-positioned filters that would reject or drop all non-conforming messages would significantly reduce the volume of spam over any long period of time. Such filters would also drop legitimate mail originating from at least some versions of what are probably the two most common desktop mail clients today (one might debate whether that would be a good thing --it would certainly help with virus/worm control-- but it isn't a spam issue).

The evidence is that, if it became clear that a serious effort was developing to deploy such filters, the spammers would start sending conforming messages more rapidly than the filters could actually be spun up. Would this inconvenience them, or the authors of spam tools? Yes, but almost certainly not very much or for very long. It would, perversely, actually help the businesses of the spam tool builders: "get your new, updated, standards-conforming bulk mailer here and get past the new 2821-conformance-testing filters".

     john




<Prev in Thread] Current Thread [Next in Thread>