On Tue, Nov 09, 2004 at 12:04:03 +0100, Roger Schmid wrote:
> ASMTP is a nearly useless solution, since most users using outlook
> and other Mailclients which are storing passwords.. any worm should
> be able to use the cached passwords.. or using mapi to send worms
shure, but the worm will only be able to use the users mail address!
> CC smtp relay is even only usable as an relay from customers of CC
> so why made shure this is a CC user when the user can only relay
> from CC ranges ?
> There are users arround in the CC network which are not costumers
> of CC ? .. this would be then a more seriously problem
Well, I'm not shure if I got this right, but we have customers of
cablecom that use our mailsystem (same goes for bluewin) - I assume CC
is facing the same problem as AOL, abusers like to use their domain as
sender-domain, so their users will get all the backscatter which is no
fun at all. AFAIK ASMTP+SPF _will_ eliminate this problem.
> We are blocking dynamic ranges and the amazing reduced amount
> of spam and worms beside of some very rarely false block's telling
> us this is a good way.
That works fine - but not all customers know that. So if the big ISPs
enforce that their customers have to use their MTAs you'll get less
calls where you have to explain "what's a dynamic ip" and "why are we
blocking dynamic ip" and other questions regarding this practice.
> btw: i never understand why using a far away smtp relay when most
> isp's offer an SMTP server to the customer of them ?
well, in the beginning every MTA was an "open relay" - but who am I to
teach history leasons... the reasons are well known why this isn't
anymore and it seems that in the future you'll have to submit your
message to a MTA that is responsible for the domain you want send mail
from. I guess it's somewhat an evolution from an "academic design" to a
"nasty boys reality".
> only my thought.. of course
my 2c too
--
_;\_ Philipp Morger / PHM2-RIPE System & Network Administrator
/_. \ Dolphins Network Systems AG Phone +41-1-847'45'45
|/ -\ .) Email: <[EMAIL PROTECTED]>
-'^`- \; Don't send mail to: [EMAIL PROTECTED]
_______________________________________________
swinog mailing list
[EMAIL PROTECTED]
http://lists.init7.net/cgi-bin/mailman/listinfo/swinog
