Re: ISP outbound SMTP filtering

on my vz home account here i use port 25 to get to my mail server in the 
datacenter where it sits just fine.

JC Dill wrote:
> Blake Pfankuch wrote:
>>> That's awfully lenient.  If one of your customers is spewing spam at  
>>> a rate of 1000 messages per hour, 48 hours is an eternity.  Also,  
>>> business class DSL is different.  Typically business class customers  
>>> pay more, sign contracts, and accept a certain amount of liability.   
>>> Joe's grandma at home is a different story.   The average linux  
>>> weenie trying to operate a mail server in his kitchen cupboard should
>>
>>> be relaying his outbound mail through his ISP or through some other  
>>> third party mail server.   He's not going to get much traction on a  
>>> dynamic address that's in some RBL...
>>
>> The only reason I give that much time is to take into account that
>> people have jobs, and other responsibilities.  Also take on the fact
>> that if you have a mail worm spewing, how do you get a fix for it if I
>> just shut off your internet? 
> 
> Letting the machine continue to spew spam is contributing to the 
> problem.  48 hours is WAY too long, IMHO.
> 
> You can just shutoff port 25 access to outside servers.  This solves the 
> problem for 99.99% of your users!
> 
> This comes back to the original premise - in today's spam zombie 
> infected internet ISPs can no longer allow unfettered port 25 access to 
> other networks.  Users should either use their ISPs mail server, or use 
> port 587 to access other mail servers.  Users and ISPs adapted when we 
> closed open relays, and they can (and will) adapt to this too.
> 
> AFAIK all the big ISPs have made this change or are in the process of 
> making this change.  The small (and lazy) ISPs who fail to step up when 
> changes like this are necessary are (thru their zombie infected 
> customers) becoming the primary source of spam on the internet.
> 
> Prediction:  The small ISPs that refuse to make this change will 
> eventually find their mail server RBLd by one or more big ISPs to force 
> them to change their policy.  The new UDP.
> 
> The options are to do it now (soon), at your own schedule, or do it 
> later when the schedule is forced on you when NONE of your customers can 
> send email thru your mail server.
> 
> jc
> _______________________________________________
> "Eat sushi frequently". - Avi
> [email protected] is the human contact address.
> [email protected] is the list posting address.
> See below URL for subscribe/unsubscribe and list options:
> http://inet-access.net/mailman/listinfo/list
> 
> 
> 
> =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> Scanned with Copfilter Version 0.84beta2 (P3Scan 2.2.1)
> AntiSpam:  SpamAssassin 3.1.8
> AntiVirus: ClamAV 0.90.2/3363 - Tue Jun  5 13:58:45 2007
> by Markus Madlener @ http://www.copfilter.org
> 

-- 
My "Foundation" verse:
Isa 54:17  No weapon that is formed against thee shall prosper; and 
every tongue that shall rise against thee in judgment thou shalt 
condemn. This is the heritage of the servants of the LORD, and their 
righteousness is of me, saith the LORD.

-- carpe ductum -- "Grab the tape"
CDTT (Certified Duct Tape Technician)

Linux user #322099
Machines:
206822
256638
276825
http://counter.li.org/
_______________________________________________
"Eat sushi frequently". - Avi
[email protected] is the human contact address.
[email protected] is the list posting address.
See below URL for subscribe/unsubscribe and list options:
http://inet-access.net/mailman/listinfo/list