Re: Discussion from Clamav list

Hi Craig,

On Fri, Feb 13, 2004 at 09:15:32AM -0700, Craig Daters wrote:
> There is a discussion going on over at the ClamAV users list about 
> ASK (see below), and I was just curious...this discussion prompted me 
> to wonder. What if the majority of forged email address are real. 
> Will innocent users be getting these confirmation requests?

Well, from my experience, most forged email is forged with an invalid
sender's address. Sometimes, however, email is indeed forged with a valid
return path (has happened to me). In this case, you'll not only receive
confirmation requests to messages you did not send, but also:

- Zillions of mail bounces caused by invalid email addresses in the
  spammer email list.
  
- Emails from 'vacation' style autoresponders.
  
- Emails from mailing-list managers of all sorts

So, I'd assume it's safe to say that challenge-authentication agents did not
create the problem. The problem is unscrupulous people who send spam and the
SMTP protocol that does not offer a proper way to authenticate. Of course,
this is just my humble opinion... :)

The irony of all this is that the ClamAV mailing-list management software
would cause the very same problem...

Regards,
Paga

> Craig Daters ([email protected])
> Systems Administrator
> West Press Printing
> 1663 West Grant Road
> Tucson, Arizona 85745-1433
> 
> Tel: 520-624-4939
> Fax: 520-624-2715
> 
> www.westpress.com
> 
> --
> 
> -- 
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
> MailScanner thanks transtec Computers for their support.
> 
> 
> 
> -------------------------------------------------------
> SF.Net is sponsored by: Speed Start Your Linux Apps Now.
> Build and deploy apps & Web services for Linux with
> a free DVD software kit from IBM. Click Now!
> http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
> _______________________________________________
> A-S-K-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/a-s-k-users
> 

-- 
Marco Paganini          | UNIX / Linux / Networking
[email protected]   | PGP: http://www.paganini.net/pgp/
http://www.paganini.net | Magnus Frater te spectat...


-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click