Re: Identifications dealing with Bulk Unsolicited Messages (BUMs)

[Harald Tveit Alvestrand <harald at alvestrand.no>]

--On 18. februar 2007 03:10 -0800 Douglas Otis <dotis at mail-abuse.org> wrote:

> The IP address of the SMTP client can be found within an ASN to uncover
> a network provider.  Helos might verify, which may then also identify a
> domain used by a network provider's customer.  Of course the host names
> within the reverse PTR may also verify as well.  Identifying the network
> provider is perhaps the most reliable, as an IP address represents a
> basic element of message interchange and routing.

Identifying the previous hop, you mean.

If this was effective, blacklists would have solved the spam problem.

If you're lucky (no relays), you're identifying the botnet component that 
was hijacked into sending the message.

Haven't we been here before?



_______________________________________________
Ietf mailing list
Ietf at ietf.org
https://www1.ietf.org/mailman/listinfo/ietf