[59332] in North American Network Operators' Group
Re: Major E-mail Delivery for FTC DNCR Launch
daemon@ATHENA.MIT.EDU (Leo Bicknell)
Wed Jun 25 21:25:49 2003
Date: Wed, 25 Jun 2003 21:25:12 -0400
From: Leo Bicknell <bicknell@ufp.org>
To: "Callahan, Richard M, SOLGV" <rmcallahan@att.com>
Cc: nanog@nanog.org,
"Windelberg, Marjorie L, SOLGV" <windelberg@att.com>,
"Weiss, Christine G, SOLGV" <cgweiss@att.com>
Mail-Followup-To: "Callahan, Richard M, SOLGV" <rmcallahan@att.com>,
nanog@nanog.org,
"Windelberg, Marjorie L, SOLGV" <windelberg@att.com>,
"Weiss, Christine G, SOLGV" <cgweiss@att.com>
In-Reply-To: <729306F70E13DB43AA2D7AA0FAD4715D05441718@OCCLUST03EVS1.ugd.att.com>
Errors-To: owner-nanog-outgoing@merit.edu
--OgqxwSJOaUobr8KG
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
* Make sure repeated attempts to register the same e-mail address
get throttled. Don't make the web server a way to e-mail bomb
people.
* Put in the e-mail a clear, short, easy to read over the phone
link (http://www.yoursite.com/spam.html) that describes what
action on the web site sends these e-mails, how to identify an
e-mail as actually coming from the site, and where to report any
sort of mailbombing (back to the first point).
* Make sure your mail servers are squeeky clean. Forward and
reverse match, valid MX's, they report their own name in SMTP
headers, no "untrusted sender used -f", etc. Valid abuse@
for the machine name, and the parent domain are essential.
Valid contacts for the domain and IP block are helpful.
In general this sounds like a low-risk activity, as described.
--=20
Leo Bicknell - bicknell@ufp.org - CCIE 3440
PGP keys at http://www.ufp.org/~bicknell/
Read TMBG List - tmbg-list-request@tmbg.org, www.tmbg.org
--OgqxwSJOaUobr8KG
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (FreeBSD)
iD8DBQE++kt4Nh6mMG5yMTYRAtctAKCGg1AK2+N+XiVvimCM1Q5so4xLiQCfchff
2Pqjo9Sji3Xc3XyT1UqayEY=
=4KN6
-----END PGP SIGNATURE-----
--OgqxwSJOaUobr8KG--