Re: Spammers answering TMDA Queries

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Fred Baker writes:
> On Oct 4, 2007, at 11:56 AM, Hallam-Baker, Phillip wrote:

>> The problem is the amount of time it is taking to moderate mail  
>> sent by non subscribers.

> yes. For example, every email from @cisco.com is dkim-signed. The  
> IETF can automagically dump any such email that is not signed, or for  
> which the signature doesn't check out. I know that fred@xxxxxxxxx is  
> one of many commonly-spoofed email addresses - I can tell that from  
> the backscatter I find in my junk box.

> For how many of us is that true?

FWIW, about 12% (14 out of 114) of the active non-spam senders to this
list had DKIM-Signature headers in the past two weeks.  I don't know
enough about DKIM to tell whether the same assumption holds for the
non-cisco.com sender domains (mostly gmail.com plus a few smaller
ones): that mail from them can be considered spoofed if the DKIM
headers are absent.

: leinen@diotima[lists.ietf.censored]; cat `egrep -l -i '^DKIM-Signature:' *`  | egrep -i '^From:' | sort | uniq -c | wc -l
14
: leinen@diotima[lists.ietf.censored]; cat * | egrep -i '^From:' | sort | uniq -c | wc -l
114
-- 
Simon.

_______________________________________________

Ietf@xxxxxxxx
https://www1.ietf.org/mailman/listinfo/ietf

[Index of Archives]     [IETF Annoucements]     [IETF]     [IP Storage]     [Yosemite News]     [Linux SCTP]     [Linux Newbies]     [Fedora Users]