Re: Filtering Header Draft Discussion

Philip Miller <[email protected]> Mon, 18 Oct 2004 19:15:04 -0700
Newsgroups gmane.ietf.asrg.filtering
Message-ID <[email protected]>
J.J.Bailey wrote:
> When reading headers, I prefer to see them concise, self-explanatory,
> and most importantly, easy for both humans and programs to parse.  The
> format used by SpamAssassin and Bogofilter seem to meet these
> requirements, so I adopted them for my own filters.  For example, I
> have a general DNSBL filter that allows users to check any DNSBL they
> wish.  Example header:
> 
> X-DNSBL: 219.146.207.114, dnsbl.njabl.org=127.0.0.9
> 
> Ditto for a general RHSBL filter:
> 
> X-RHSBL: 01o.com, rhsbl.ahbl.org=127.0.0.2
> 
> After reading the draft, I see the X-DNSBL entry looking something like:
> 
> X-DNSBL: ip="219.146.207.114"; dnsbl="dnsbl.njabl.org"; value="127.0.0.9";
> 
> I don't see any problems with making these changes.

The contents of that header look approximately like one would expect, with simple 
key-value pairs. However, part of the goal of this draft is to standardize the name of the 
header that filters output, so that readers can look for the same header name every time. 
Additionally, having complete trace information about the software adding the header is 
desirable.

In other words, a mail scanner that added a Filtered header indicating DNSBL results could 
look something like:
Filtered: name="DNSBL-Check"; version="1.23"; host="mail.example.com"; function="dnsbl";
     dnsbl-name="NJABL"; dnsbl-server="dnsbl.njabl.org"; auth-received="Fri, 5 Mar 2004
     19:50:45 -0800 (PST)"; ip="219.146.207.114"; response="127.0.0.9"; tag="open-relay";

> Does anyone have a feel for how much effort is being put into client-
> side filtering?  I'm curious to know what's driving the standard and
> who needs what where.

At the present, I can't really speak to that question.

Phil Miller