George Theall on 22 Mar 2004 03:44:02 -0000 |
On Sun, Mar 21, 2004 at 08:16:00PM -0500, Art Clemons wrote: > IMAP requires the user to connect to the server in order to send mail. As others have mentioned, this is incorrect. Retrieving mail is independent of sending it, barring something like POP before SMTP. > Not too many properly setup servers will allow non-users to send lots of > email from them without cause. Comcast allowing Comcast users to use > other email addresses probably isn't a problem since Comcast is > authenticating the user Define "non-users". Does this include machines on, say, Comcast's network that, thanks to the current crop of worms and viruses, are allegedly under control of various spam gangs? While I suspect the lion's share of these connect directly to their targets, I've seen plenty of examples of spam sent via Comcast's mail servers but from home PCs. Further, I suspect that as use of DNS-based blacklists increases, the spammers will make more and more use of victim's ISP's own mail servers to send their messages. > further it's a simple solution to cut off email > privileges once a certain number of emails goes out from that user. You might find it worthwhile to visit SenderBase.org, which tries to assess hosts sending email. Pull up the records for, say, comcast.net (http://www.senderbase.org/?page=domains&searchString=comcast.net&searchBy=domain), and you'll see there are hundreds of home PCs on its network with a monthly magnitude of 5.0 or better, which translates to an estimated 100,000+ messages per day for the past month! After looking at Comcast's records, pull up those of RoadRunner, Pac Bell, Optimum Online, Shaw Communications, or pretty much any other big ISP. George -- theall@tifaware.com Attachment:
pgptOuPNeHuzb.pgp
|
|