Re: [Asrg] Sender ID again, was Anti-spam laws do work

["George Ou" <george_ou at netzero.com>]

----- Original Message ----- 
From: "John Levine" <asrg at johnlevine.com>
To: <asrg at ietf.org>
Cc: <george_ou at netzero.com>
Sent: Wednesday, July 28, 2004 8:52 AM
Subject: Re: [Asrg] Sender ID again, was Anti-spam laws do work


> > Well, how does the current version of DCC that only works on unique
> > messages work so well?
>
> DCC does a great job of detecting bulk spam.  It does an equally good
> job of detecting non-spam bulk mail, which means that if you use it to
> block mail, you'll lose a great deal of wanted mail unless you also do
> a lot of manual whitelisting.  I use DCC, and I maintain a whitelist,
> and it works for me, but it's not easy nor automatic to do so.  Vern
> has always made it crystal clear what DCC is and isn't, and made it
> equally clear that if you want to get mailing list mail, you have to
> whitelist it.

I'm well aware of what DCC alone can do, and I'm not talking about DCC
alone.  I'm talking about comprehensive solutions (open source or commercial
appliances) that already do an extremely good job of stopping well over 99%
of spam with an extremely low false positive rate.  Obviously, they don't
solely rely on DCC, but weights it very heavily.  They use a combination of
other factors as well and makes an educated guess on what is likely spam and
what isn't and it clearly works very well.  After all, why would people pay
$40K for a pair of these appliances.

Anyways, the point is, SenderID will be another factor that can be utilized
within that decision process.  If statistical analysis shows that domain
xyz.com (SenderID verified) is sending 99% spam, then blocking domain
xyz.com is a lot broader than blocking just an IP address or a message.  The
mechanism that DCC currently uses could be used to track Domain level
statistics, rather than just message level statistics.

George Ou


_______________________________________________
Asrg mailing list
Asrg at ietf.org
https://www1.ietf.org/mailman/listinfo/asrg