Re: Scope of SMTP Verify

On Tue, Mar 02, 2004 at 10:17:51AM +0100, Peter J. Holzer wrote:
> 
> E.g., "This is Joe's laptop". Or "This is the same computer that sent
> spam last week".


Who is Joe? In some countries human names are as volatile and
arbitrary like dynamic IP addresses.



> The IP address is only an indicator of identity for systems with static
> IP addresses.


The pair (IP address, time) is an indicator. Since LMAP verifies while 
the SMTP connection is alive, this is sufficient. But that's actually 
a problem of Microsoft's CallerID proposal. They do a delayed
verification, which won't work with dynamic IP addresses (except if
the use dynamic authorization and make the time part of the query).





> Some kind of reputation system.

"reputation system" is something magic which we can't describe
sufficiently. It's more a religious thing than a technical mechanism.
Tell me how exactly your reputation system should work and I'll tell
you why it won't work.

Of course, since it is not precisely defined, it's always easy to 
believe, that it will do the job, since nobody can show the flaws of 
a yet completely undefined term.

regards
Hadmut