nanog mailing list archives
Re: unwise filtering policy from cox.net
From: "Suresh Ramasubramanian" <ops.lists () gmail com>
Date: Thu, 22 Nov 2007 06:54:55 +0530
On Nov 22, 2007 3:33 AM, Barry Shein <bzs () world std com> wrote:
If that (eg () example com) overloads those servers, even if they're valiantly trying to pass the connection off to another machine, then you have to use some other method like eg () special example com or eg () other-domain com and hope the clients will somehow use that tho for BIGCOMPANY there's a tendency to just bang in abuse () BIGCOMPANY COM.
... and the RFC says that, and those people that still do manually report abuse will email abuse@domain or postmaster@domain instead of hitting report spam and letting their ISP forward it across in a feedback loop (which will go to an entirely different, machine parsed address as the ARF spec is designed to let you do). You can always alias abuse@ internally to a subdomain if you wish - but that wouldnt be because abuse@ slows down your MXs. The smtp load inbound to an abuse mailbox will be fairly small compared to the general load of smtp (and spam) coming your users' way for sure. There's lots of ways to manage an abuse mailbox (such as filter spam to your abuse mailbox into a bulk folder, review it and then feed it to scripts that parse the spam and feed the results to your filters). MAAWG's been working on an abuse desk bcp for quite some time (the hard / tech part of it, as well as soft abuse stuff like motivating and training abuse deskers, giving them career paths etc) --srs
It can be a problem in joe jobs, as one e.g. If you think I'm wrong (or Sean's wrong) even for a milisecond then trust me, this is going right over your head. Think again or email me privately and I'll try to be more clear. P.S. It's an interesting thought. The only approach to a solution I could imagine is that the whole address would have to be passed in the MX query. On November 21, 2007 at 21:06 paul () clubi ie (Paul Jakma) wrote: > > > > An unfortunate limitation of the SMTP protocol is it initially only > > looks at the right-hand side of an address when connecting to a > > server to send e-mail, and not the left-hand side. > > > full) or the normal server administrators may make changes which > > affects all addresses passing through that server (i.e. block by IP > > address). > > I guess you're saying there's something architectural in email that > makes it impossible/difficult (limitation) to apply different policy > to the LHS. > > That's not correct though. The receiving MTA is quite free to apply > differing policies to different LHSes. And at least one MTA allows > you special-case measures applied to tables of addresses, such as > whether DNSbl lookups should be applied. > > SMTP is distributed, so you do of course have to take care to keep > distributed policy consistent. But, again, that has nowt to do with > LHS/RHS of email addresses. > > regards, > -- > Paul Jakma paul () clubi ie paul () jakma org Key ID: 64A2FF6A > Fortune: > A plumber is needed, the network drain is clogged -- -Barry Shein The World | bzs () TheWorld com | http://www.TheWorld.com Purveyors to the Trade | Voice: 800-THE-WRLD | Login: Nationwide Software Tool & Die | Public Access Internet | SINCE 1989 *oo*
-- Suresh Ramasubramanian (ops.lists () gmail com)
Current thread:
- [admin] Re: unwise filtering policy from cox.net, (continued)
- [admin] Re: unwise filtering policy from cox.net Alex Pilosov (Nov 20)
- Re: [admin] Re: unwise filtering policy from cox.net Martin Hannigan (Nov 20)
- [admin] Re: unwise filtering policy from cox.net Alex Pilosov (Nov 20)
- Re: unwise filtering policy from cox.net Martin Hannigan (Nov 20)
- RE: unwise filtering policy from cox.net Raymond L. Corbin (Nov 20)
- Re: unwise filtering policy from cox.net Valdis . Kletnieks (Nov 20)
- Re: unwise filtering policy from cox.net Chris Owen (Nov 20)
- Re: unwise filtering policy from cox.net chuck goolsbee (Nov 20)
- Re: unwise filtering policy from cox.net Valdis . Kletnieks (Nov 20)
- Re: unwise filtering policy from cox.net Sean Donelan (Nov 20)
- Re: unwise filtering policy from cox.net Paul Jakma (Nov 21)
- Re: unwise filtering policy from cox.net Barry Shein (Nov 21)
- Re: unwise filtering policy from cox.net Suresh Ramasubramanian (Nov 21)
- BOTNET reference involving oscilloscope Howard C. Berkowitz (Nov 23)
- Re: BOTNET reference involving oscilloscope Leigh Porter (Nov 23)
- Re: BOTNET reference involving oscilloscope Adrian Chadd (Nov 23)
- Re: unwise filtering policy from cox.net Paul Jakma (Nov 21)
- Re: unwise filtering policy from cox.net Chris Edwards (Nov 21)
- Re: unwise filtering policy from cox.net Robert E. Seastrom (Nov 21)
- Re: unwise filtering policy from cox.net Leigh Porter (Nov 21)
- Re: unwise filtering policy from cox.net Suresh Ramasubramanian (Nov 22)
- Re: unwise filtering policy from cox.net Adrian Chadd (Nov 22)
- Re: unwise filtering policy from cox.net Suresh Ramasubramanian (Nov 22)
- Re: unwise filtering policy from cox.net Joel Jaeggli (Nov 26)