Re: [Asrg] BCP suggestion: port-blocking by ISPs

[Devdas Bhagat <devdas at dvb.homelinux.org>]

On 03/08/04 17:57 +0100, Tim Bedding wrote:
> Walter
> 
> > Several major consumer-oriented ISPs block port-25 traffic (coming and
> > going) direct to external MTAs.  This is a palliative measure dealing
> > with compromised machines.  We can do better.  We can implement
> > preventative measures reduce the incidence of compromised machines.
> 
> I am considering the idea of a regulatory body in the UK using
> fines to ensure compliance with certain rules to tackle spam.

How about making them pay money to the end recipient of a mail? Proof by
complaint sent to abuse desk, and cc'ed to the regulatory body. If the
mail originated from the ISPs network, and they don't take action within
a suitably low period, terminate.

> One rule would be that ISPs must ensure rapid isolation of zombie
> machines.
> 
> Should I add port 25 blocking to the list of rules?

Yes please. Outbound for broadband ISPs and inbound and outbound for
dialup. 

> Can you think of other things that definitely should be required?

Abuse desk handling. 

Ingress/Egress filtering to prevent IP spoofing.

Devdas Bhagat

_______________________________________________
Asrg mailing list
Asrg at ietf.org
https://www1.ietf.org/mailman/listinfo/asrg