On Mon, Oct 13, 2003 at 05:46:52AM -0700, Avleen Vig wrote:
> On Mon, Oct 13, 2003 at 10:23:07AM +0100, Matthew Byng-Maddick wrote:
> > Consider yourself slapped...
> Thanks :) I think I just need a few others to tell me i'm not crazy for
> not wanting to ignore 5xx.
:-)
> > > I run my own mail server (MX+relay) on the end of a business cable
> > > connection.
> > Right... And, given how many people run Exchange as an open relay on
> > "business cable" connections, why should I trust them?
> Well, the problem then is that they should be blocked for being an open
> relay, not for being on a cable modem.
True. But it's easier for the ISP not to have the hassle of anyone
complaining, and listing the whole lot straight away. Quite honestly
if I never have to receive mail from a badly configured exchange server
on a business cable line, it'll be too soon.
> > > Unfortuantely there are (urgh) idiots who are using DNSBL which block
> > > ALL broadband connection, regardless of if they're business or
> > > residential connections.
> > Why does it make a difference? As far as I'm concerned the two are just
> > as likely to be running the above setup. This is based on some experience,
> > and I don't think I'm silly in making this judgement.
> Not *really*.
> I could argue that exchange servers are more likely to be running as
> open relays on business connections (how many home users use exchange?).
That's true, however one of the recent worms, I don't remember which, showed
how many people were running services without them knowing it. There is
much more danger that can be done from badly configured SMTP than, say,
from badly configured HTTP.
> But your analogy is severely flawed.
What analogy.
> Most spam from broadband connections is from trojaned machines, not open
> relays.
Quite possibly. I'm still going to heuristically filter based on name,
and still suggest that you use your ISPs smarthost. It's much easier for
me to deal with abuse/postmaster contacts in that situation then when
you're at the end of a consumer DSL line.
This, it should be noted, my policy on my home mail system, not on my
work one.
MBM
--
Matthew Byng-Maddick <mbm@???> http://colondot.net/
