nanog mailing list archives
Re: ingress SMTP
From: Nicholas Suan <nsuan () nonexiste net>
Date: Wed, 3 Sep 2008 12:58:53 -0400
On Sep 3, 2008, at 12:49 PM, Jay R. Ashworth wrote:
On Wed, Sep 03, 2008 at 09:40:20AM -0700, Michael Thomas wrote:"Allowing unfiltered public access to port 25 is one of the things thatincreases everyone's spam load, and your ISP is trying to be a GoodNeighbor in blocking access to anyone's servers but their own; many ISPs are moving towards this safer configuration. We're a good neighbor, as well, and support Mail Submission Protocol on port 587, and here's how you set it up -- and it will work from pretty much anywhere forever."I think this all vastly underrates the agility of the bad guys. So lots ofISP's have blocked port 25. Has it made any appreciable difference?Not that I can tell. If you block port 25, they'll just use another port anda relay if necessary.You're forgetting that 587 *is authenticated, always*.
I'm not sure how that makes much of a difference since the usual spam vector is malware that has (almost) complete control of the machine in the first place.
Current thread:
- Re: ingress SMTP, (continued)
- Re: ingress SMTP Jay R. Ashworth (Sep 03)
- RE: ingress SMTP Frank Bulk (Sep 03)
- Re: ingress SMTP Eugeniu Patrascu (Sep 07)
- Re: ingress SMTP Jay R. Ashworth (Sep 03)
- Re: ingress SMTP Justin Scott (Sep 03)
- Re: ingress SMTP Alec Berry (Sep 03)
- Re: ingress SMTP Justin Scott (Sep 03)
- Re: ingress SMTP Alan Hodgson (Sep 03)
- Re: ingress SMTP Jay R. Ashworth (Sep 03)
- Re: ingress SMTP Michael Thomas (Sep 03)
- Re: ingress SMTP Jay R. Ashworth (Sep 03)
- Re: ingress SMTP Nicholas Suan (Sep 03)
- Re: ingress SMTP Jay R. Ashworth (Sep 03)
- Re: ingress SMTP Valdis . Kletnieks (Sep 03)
- Re: ingress SMTP Tony Finch (Sep 04)
- Re: ingress SMTP David Champion (Sep 04)
- Re: ingress SMTP Joel Jaeggli (Sep 10)
- Re: ingress SMTP Robert E. Seastrom (Sep 11)
- Re: ingress SMTP Bill Stewart (Sep 12)
- Re: ingress SMTP Mark Foster (Sep 12)
- Re: ingress SMTP Matthew Moyle-Croft (Sep 12)
- RE: ingress SMTP Frank Bulk (Sep 13)
- Re: ingress SMTP Alec Berry (Sep 03)