[91758] in North American Network Operators' Group
Re: fingerprinting and spam ID (was: Re: ISP wants to stop outgoing web based spam)
daemon@ATHENA.MIT.EDU (Ken Simpson)
Fri Aug 11 12:24:04 2006
Date: Fri, 11 Aug 2006 09:19:17 -0700
From: Ken Simpson <ksimpson@mailchannels.com>
To: nanog@merit.edu
Reply-To: Ken Simpson <ksimpson@mailchannels.com>
In-Reply-To: <20060811155508.GD1444@hesketh.com>
Errors-To: owner-nanog@merit.edu
> The problem is that I already see enough legit mail hit the
> quarantine due to being HTML/multipart, suspected of being sent
> "direct-to-MX" due to Exchange's bizarre habit of not providing an
> audit trail via Received headers, etc.
Of course by the time you can inspect the body of a message, it's
already sucked down a large chunk of your resources. Host type is
useful in pre-filtering even before you go so far as to send the
banner -- to get rid of or at least slow down the crap that you almost
certainly know is on its way.
> The biggest problem with email isn't that it doesn't work; the biggest
> problem with email is that there are so many vendors who simply refuse
> to implement SMTP properly.
I heartily agree! We have seen some laughable renditions of SMTP over
the years.
Regards,
Ken
--
MailChannels: Reliable Email Delivery (TM) | http://mailchannels.com
--
Suite 203, 910 Richards St.
Vancouver, BC, V6B 3C1, Canada
Direct: +1-604-729-1741