[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Asrg] [IP] do-not-email list canned



"George Ou" <george_ou at netzero.com> wrote:
> What is the likelihood that the official SMTP server would allow a
> user to send out 10,000 messages a minute or even 100 messages a
> minute?

  It's happening today.

  People with lots of money to spend on machines don't necessarily
know how to administer them.  As a result, their machines "attack"
people with less money to spend on machines.  There have been cases
where an "owned" machine was sending 10^6 messages/day to one
destination, and the administator of that machine hadn't even
noticed...

  Similarly, see a number of virus outbreaks where large numbers of
SMTP clients overwhelm other peoples mail servers.  If the viruses
were forced to go through the ISP's MTA, then that MTA might go down
under the load, and therefore protect everyone else.

>  What is the likelihood that they would allow a user or a hijacked
> machine to send to blast out to 100 recipients?

  It happens.

> I'm sure if this became widely abused, the ISP could easily put in
> some strict quotas for ordinary users.

  I don't think quotas would help, or be politically acceptable.  If
SMTP had something like TCP's slow-start, that would be a better
approach.

  Alan DeKok.

_______________________________________________
Asrg mailing list
Asrg at ietf.org
https://www1.ietf.org/mailman/listinfo/asrg