--On 18. februar 2007 03:10 -0800 Douglas Otis
<dotis(_at_)mail-abuse(_dot_)org> wrote:
The IP address of the SMTP client can be found within an ASN to uncover
a network provider. Helos might verify, which may then also identify a
domain used by a network provider's customer. Of course the host names
within the reverse PTR may also verify as well. Identifying the network
provider is perhaps the most reliable, as an IP address represents a
basic element of message interchange and routing.
Identifying the previous hop, you mean.
If this was effective, blacklists would have solved the spam problem.
If you're lucky (no relays), you're identifying the botnet component that
was hijacked into sending the message.
Haven't we been here before?
_______________________________________________
Ietf mailing list
Ietf(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/ietf