I'm with you for the most part, but to take it a step further. Senderbase does a pretty good job of exposing ISP mail servers:
http://www.senderbase.org/search?searchBy=ipaddress&searchString=68.168.78.199&whichOthers=%2F24
It would be great to have a registry for large ISP mail servers (AOL already provides this info for instance), and with this information, we could design new capabilities. First, big ISP's could be excluded from RBL's tied to spamtraps without every RBL admin needing to maintain their own whitelist. Second, you could have Declude for instance could cancel out any RBL hits for a large ISP mail server in order to protect from false positives (per hop). I would actually take this a step further and want to add 3 points if I could be confident of the mail server not getting scored by any RBL's. This would remove some of the slop in our systems. I figure if they're big, they will not have their servers hacked as spam zombies, or at least they would figure it out quickly one would think. That would give the technical and content filters an easier time, only needing another 7 points before getting held, which shouldn't be an issue with people mail.
I'm not sure though that I would want to get into tracking the smaller guys, like myself for instance. At one point in time, even I ran an open relay so why should you trust me :)
They have services that can tell you every single TV show that's on in every different cable system, and I would think that there is much less data needed to get this to work. When things become more commercialized, I would imagine that stuff like this will come. I'd do it myself but I'm booked through 2020.
Matt
Colbeck, Andrew wrote:
<massive snip, removing all sense of a rational conversation>
Matt> I would love to have a list of ISP mail servers so that I could Matt> add a few points to them by default because you have to rely Matt> mostly on content to find the spam that comes from them.
To revive an old thread that you were in, I meant to comment on SPF a while back, but couldn't spare the time...
I believe that SPF will be a welcome addition to my toolbag, while not being a burden for ISPs. My reason being that the ISPs that choose to implement it to describe their outbound mail hosts are deliberately taking on the responsibility for helping 3rd party mail admins like me block spam from their broadband and dial-up networks.
So to them, reports of spam from their netblocks, or through their own mail hosts by a subscriber, are not a burden at all, just part of their responsibility. That's an ISP I'd be happy to deal with.
An ISP like that could go on to earn a gold star from me by also giving those non-corporate clients a revdns name that is separate from their mail hosts, or for that matter any of their servers, so I could block all mail directly from them.
Then I'd need a foolproof way to catch zombies from that ISP who are sending through somebody else's mail server...
As a consumer, I'd be pretty happy if my ISP went the extra mile to firewall off my PC from sending/accepting SMTP except to their mailservers, unless I also have the technical acumen to go to a self-serve web page to list the traffic which I personally aver is non-hostile. Because really, if I need that traffic, I've got the technical acumen.
But I don't make the rules.
So there's my 2 cents to end the week.
Andrew 8) --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
-- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =====================================================
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
