[77115] in North American Network Operators' Group
Re: fixing insecure email infrastructure (was: Re: [eweek article] Window of "anonym
daemon@ATHENA.MIT.EDU (Steven Champeon)
Thu Jan 13 11:51:57 2005
X-Received-From: schampeo@habanero.hesketh.net
X-Delivered-To: <nanog@merit.edu>
Date: Thu, 13 Jan 2005 11:51:24 -0500
From: Steven Champeon <schampeo@hesketh.com>
To: nanog@merit.edu
Mail-Followup-To: nanog@merit.edu
In-Reply-To: <20050113112104.GC23779@nic.fr>
Errors-To: owner-nanog-outgoing@merit.edu
on Thu, Jan 13, 2005 at 12:21:04PM +0100, Stephane Bortzmeyer wrote:
>
> On Wed, Jan 12, 2005 at 10:59:43AM -0500,
> Steven Champeon <schampeo@hesketh.com> wrote
> a message of 98 lines which said:
>
> > 1) any legitimate mail source MUST have valid, functioning,
> > non-generic rDNS indicating that it is a mail server or
> > source. (Most do, many do not. There is NO reason why not.)
>
> Since this list is NANOG, it is reasonable that it has a North
> American bias but remember the Internet is worldwide. I do not know
> how it is in the USA but there are many parts of the world where ISP
> do not have a delegation of in-addr.arpa and therefore cannot pass it
> to their customers. (It is also common to have many levels of ISP, so
> you need to go through many layers before reaching the RIR.)
Seems this needs to be fixed, then. Not my problem.
> Requesting rDNS means "I don't want to receive email from Africa".
See above.
--
hesketh.com/inc. v: +1(919)834-2552 f: +1(919)834-2554 w: http://hesketh.com
join us! http://hesketh.com/about/careers/account_manager.html join us!