nanog mailing list archives
Re: Spammers Skirt IP Authentication Attempts
From: Paul Vixie <vixie () vix com>
Date: 08 Sep 2004 23:46:36 +0000
I see that 56trf5.com is a real domain. Does this mean that the domain name registries and DNS are now being polluted with piles of garbage entries in the same way that Google searches have been polluted with tons of pages full of nothing but search keywords and ads?Yes - and there's a list of such domains that we track published as the ob.surbl.org zonefile (http://www.surbl.org for details)
the way i can prove that this methodology is only employed by a minority of very-smart MTA operators is: "that it's effective." if it were widely used, such that it affected global spam volume and thus spammer revenue, then the spammers would switch to different tricks. MAPS RBL was intended to be immune to this reflexive failure mode because it targetted address space, which was a scarcer commodity than domain names. i recommend against deployment of anti-spam methodologies whose only guaranteed effect is to force spammers to have to be smarter. (they will!) -- Paul Vixie
Current thread:
- Re: Spammers Skirt IP Authentication Attempts, (continued)
- Re: Spammers Skirt IP Authentication Attempts Dan Mahoney, System Admin (Sep 06)
- Re: Spammers Skirt IP Authentication Attempts Niels Bakker (Sep 06)
- Re: Spammers Skirt IP Authentication Attempts Peter Corlett (Sep 06)
- Re: Spammers Skirt IP Authentication Attempts Richard Welty (Sep 06)
- Re: Spammers Skirt IP Authentication Attempts Dan Mahoney, System Admin (Sep 06)
- Re: Spammers Skirt IP Authentication Attempts Paul Vixie (Sep 06)
- Re: Spammers Skirt IP Authentication Attempts Mark Jeftovic (Sep 06)
- Re: Spammers Skirt IP Authentication Attempts Rich Kulawiec (Sep 08)
- Re: Spammers Skirt IP Authentication Attempts Michael . Dillon (Sep 08)
- Re: Spammers Skirt IP Authentication Attempts Richard Cox (Sep 08)
- Re: Spammers Skirt IP Authentication Attempts Suresh Ramasubramanian (Sep 08)
- Re: Spammers Skirt IP Authentication Attempts Paul Vixie (Sep 08)
- Very peculiar Telnet probing (possibly spoofed?) Jeff Kell (Sep 08)
- Re: Very peculiar Telnet probing (possibly spoofed?) Suresh Ramasubramanian (Sep 08)
- Re: Very peculiar Telnet probing (possibly spoofed?) Chris Brenton (Sep 09)
- Re: Spammers Skirt IP Authentication Attempts Mark Jeftovic (Sep 06)
- Re: Spammers Skirt IP Authentication Attempts [operational content at end] Rich Kulawiec (Sep 09)
- Re: Spammers Skirt IP Authentication Attempts Daniel Reed (Sep 08)
- Re: Spammers Skirt IP Authentication Attempts Stephane Bortzmeyer (Sep 10)