[185541] in North American Network Operators' Group
Re: AW: Uptick in spam
daemon@ATHENA.MIT.EDU (Ian Smith)
Tue Oct 27 08:09:02 2015
X-Original-To: nanog@nanog.org
In-Reply-To: <562ED5F7.6040300@alvarezp.org>
Date: Tue, 27 Oct 2015 08:09:00 -0400
From: Ian Smith <ian.w.smith@gmail.com>
To: Octavio Alvarez <octalnanog@alvarezp.org>
Cc: "nanog@nanog.org" <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org
On Mon, Oct 26, 2015 at 9:40 PM, Octavio Alvarez <octalnanog@alvarezp.org>
wrote:
> On 26/10/15 11:38, J=C3=BCrgen Jaritsch wrote:
> <snip>
>
But it is originating all from different IP addresses. Who knows if this
> is an attack to get *@jdlabs.fr blocked from NANOG and is just getting
> its goal accomplished.
This is the part that's been bugging me. Doesn't the NANOG server
implement SPF checking on inbound list mail? jdlabs.fr doesn't appear to
have an SPF record published. It seems to me that these messages should
have been dropped during the connection.
Ian Smith
