spf-discuss
[Top] [All Lists]

Re: Re: Unified SPF works in progress now in alpha

2004-07-09 18:16:22

----- Original Message ----- 
[Ryan Malayter]

I agree with you, Seth...Although after the troubles I've had with my
own ISP regarding the "dirty" IP space we're stuck in, I'm not sure how
much "giving ISPs the power" is going to help matters. Most ISPs turn a
blind eye towards spammers unless there are a huge number of complaints.
Only then do they take action. This saves them money chasing down minor
or inaccurate spam complaints, and gives them a few more months revenue
from the spammer's contract until they have to shut them down.

What the problem with IPs ?
You are trying to solve problem that does not exists.
Domain names are numerous, keeping information about all domain names using
single company are almost impossible.
As well information about domain names must be maintained using domain name
system.

But IPs blocks are rare. Hard to get and change. Information about owners of
current IPv4 netblocks (and I hope IPv6 too) are easy to find.
Even more - it's hard to forge this information.

So ? You wish to wait for years while all ISP (including one from China -
major "Free Bulk Email Servers" providers) list some kind of SPF information
inside their DNSs ?
Or we can already already created decentraliced DNSRBLs ?
All DNSRBLs (and similar technologies) will be easy to maintain. No needs to
wait ISPs to do anything.
This is out of ISP insterest to close spammers accounts.
Even more - if I was ISP and found somebody to use 25 port for bulk
mailing - I already have full controll over this.
No needs for me to publish restrictive policy in my netblock DNS and wait
that others check it and deny emails from _my_ client, I can negotiate
everything myself.
I've services contract signed. I can visit customer site and cut off thier
balls or network link ;o)

Instead of ISP maintained policy - we can have numerous independly
maintainted result-oriented blacklists/policy providers. This will result in
competition instead of proposed netblock owners monopoly. If such an
independ policy provider will provide false information - customers will be
able to start to use another source, while ISP maintained policy are
monopoly.
Independ policy providers can negotiate with ISPs to allow them update
information inside their databases (for example if spammer account was
terminated).

But I agree that current DNSRBL are not perfect. For example here is real
(not so old - about two months old) quote from spamcop.net for IP from
Microsoft netblock.
"207.46.248.71 listed in bl.spamcop.net (127.0.0.2)

Since SpamCop started counting, this system has been reported about 100
times by less than 10 users. It has been sending mail consistently for at
least 201.1 days. In the past 359.6 days, it has been listed __17 times__
for a total of __36.0 days__"

10% or time it was blacklisted. Not so bad ;o) Never think again about
99.99% availability.

IMHO, IP address policies maintanted only by netblock owners are non-sence.
This is clear conflict of interest.
--
Andriy G. Tereshchenko
TAG Software
Odessa, Ukraine
http://www.24.odessa.ua