On Tuesday, February 28, 2006 10:17 AM -0600, Hannah Schroeter wrote:
Hello!
On Mon, Feb 27, 2006 at 07:50:26PM -0500, Stuart D. Gathman wrote:
[...]
However, what spammers are really doing is adding SPF records to
their own throwaway domains. This in itself show that spammers
are feeling the pressure. It then requires yet another layer of
complexity to track reputation of domains once the forgeries are
eliminated.
If you track reputation of domains, you still have the open
decision how
to handle domains which have no data yet. I.e. how to detect and
handle
spammers who register *new* domains for each spam run.
Hannah brings up an excellent point. One possible answer is consider
any newly registered domain with no reputation data to be suspect, but
you still accept some mail from them to establish a reputation (you rate
limit them). As you accept mail from them turns out to be non-spam, you
increase their reputation score and their rate limit. On the other
hand, if they send you spam right away, their reputation goes bad and
you might stop accepting any mail from them completely.
--
Seth Goodman
-------
Sender Policy Framework: http://www.openspf.org/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to
http://v2.listbox.com/member/?listname=spf-discuss(_at_)v2(_dot_)listbox(_dot_)com