[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: why eliminating spoofing is interesting; RE: [Asrg] seeking comments on new RMX article



This is not IDENT 'all over again', IMHO.

-e

On Tuesday, May 06, 2003 6:32 PM, Barry Shein [SMTP:bzs@world.std.com] wrote:
> 
> On May 6, 2003 at 12:02 bobatk@exchange.microsoft.com (Bob Atkinson) wrote:
>  > An interesting observation is once you've eliminated the domain
>  > spoofing, what you've then got in hand is a domain name that you can
>  > reasonably believe has some amount of responsibility for the
>  > transmission of the message. 
> 
> Not much more than you did by (intelligently) looking at the Received
> lines.
> 
> One of the major sources of spam right now seems to be zombie robot
> hosts, hosts who have had a virus injected into them which turns them
> into unwitting spam slaves*.
> 
> So the spam is being delivered by 123-456-789-123-dsl-pool.telco.com
> and guess what it seems to be from xxxdvd@123-456-789-123-dsl-pool.telco.com
> who assures you that anything from (don't make me type it again)
> is indeed from (I'm just not going to type it again.)
> 
> Now what do you know?
> 
> * Could someone please teleport that sentence back to the TCP-IP list
> of 1985 and get the reaction?
> -- 
>         -Barry Shein
> 
> Software Tool & Die    | bzs@TheWorld.com           | http://www.TheWorld.com
> Purveyors to the Trade | Voice: 617-739-0202        | Login: 617-739-WRLD
> The World              | Public Access Internet     | Since 1989     *oo*
_______________________________________________
Asrg mailing list
Asrg@ietf.org
https://www1.ietf.org/mailman/listinfo/asrg