George Theall on 22 Mar 2004 03:44:02 -0000


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] Re: SPF


On Sun, Mar 21, 2004 at 08:16:00PM -0500, Art Clemons wrote:

> IMAP requires the user to connect to the server in order to send mail. 

As others have mentioned, this is incorrect. Retrieving mail is 
independent of sending it, barring something like POP before SMTP.

> Not too many properly setup servers will allow non-users to send lots of 
> email from them without cause.  Comcast allowing Comcast users to use 
> other email addresses probably isn't a problem since Comcast is 
> authenticating the user

Define "non-users".  Does this include machines on, say, Comcast's
network that, thanks to the current crop of worms and viruses, are
allegedly under control of various spam gangs? While I suspect the
lion's share of these connect directly to their targets, I've seen
plenty of examples of spam sent via Comcast's mail servers but from home
PCs.  Further, I suspect that as use of DNS-based blacklists increases,
the spammers will make more and more use of victim's ISP's own mail
servers to send their messages. 

> further it's a simple solution to cut off email 
> privileges once a certain number of emails goes out from that user. 

You might find it worthwhile to visit SenderBase.org, which tries to
assess hosts sending email.  Pull up the records for, say, comcast.net
(http://www.senderbase.org/?page=domains&searchString=comcast.net&searchBy=domain),
and you'll see there are hundreds of home PCs on its network with a
monthly magnitude of 5.0 or better, which translates to an estimated
100,000+ messages per day for the past month!

After looking at Comcast's records, pull up those of RoadRunner, Pac
Bell, Optimum Online, Shaw Communications, or pretty much any other big
ISP. 

George
-- 
theall@tifaware.com

Attachment: pgptOuPNeHuzb.pgp
Description: PGP signature