[BBLISA] Someone is out to get me - spam pretending to be from me

[Theo Van Dinter]

On Fri, Jan 14, 2005 at 10:46:08PM -0500, Dean Anderson wrote:
> Unless everyone uses SPF, you cannot reject based on SPF. SPF rejection 
> creates blockback abuse problems.

Sure you can.  If the domain has records published, and a fail occurs, you can
reject.  You can't reject if there is no record published though.

> If you lower your spam checks because of SPF, you will attract spam (and
> spammers) to your internet service. This is why spammers are so excited 
> about SPF.

That's why it's an anti-spoofing technique, not an anti-spam technique.  If
people are using it for anti-spam, then they've obviously not read anything
about how it works.

> BTW, DNS spoofing requires about 32000 packets, and is quite a bit easier
> than say, WEP decryption. 

It's possible, but since the attack would be per recipient DNS server,
spammers are very unlikely to do anything with this.

Even if they did though, it just means the mail gets through one level of
protection.

> SPF is patented by M$.  

BS.  PRA is patented by M$, SPF != PRA.

-- 
Theo Van Dinter, tvd at bblisa.org/felicity at kluge.net
Systems Administrator, bblisa.org/kluge.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://www.bblisa.org/pipermail/bblisa/attachments/20050114/97b99b3d/attachment.pgp