<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">What's the point of bringing in measures to fight spam if everyone ignores it?<div><br></div><div>Enforce it, and drag the providers who are ignoring it into the 21st century.</div><div><br></div><div>As for not having control over one's own DNS, I'll let others debate the merits of that.<br><div><br><div apple-content-edited="true">
<span class="Apple-style-span" style="font-family: Calibri, sans-serif; font-size: 15px; "><b><span lang="EN-GB" style="font-family: 'Gill Sans MT', sans-serif; color: rgb(192, 0, 0); "><span class="Apple-style-span" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-weight: normal; "><b><span lang="EN-GB" style="font-family: 'Gill Sans MT', sans-serif; color: rgb(192, 0, 0); ">l</span></b><b><span style="font-family: 'Gill Sans MT', sans-serif; color: rgb(74, 68, 42); ">E</span></b><span style="font-size: 10pt; font-family: 'Gill Sans MT', sans-serif; color: rgb(74, 68, 42); "> <a href="mailto:karl@mothership.co.nz">karl@mothership.co.nz</a> </span><b><span lang="EN-GB" style="font-family: 'Gill Sans MT', sans-serif; color: rgb(192, 0, 0); ">l</span></b><b><span style="font-family: 'Gill Sans MT', sans-serif; color: rgb(74, 68, 42); ">W <font class="Apple-style-span" size="3"><span class="Apple-style-span" style="font-size: 13px; font-weight: normal; "><a href="http://mothership.co.nz">mothership.co.nz</a> </span></font></span></b></span>l</span></b></span><span class="Apple-style-span" style="color: rgb(81, 81, 81); font-family: Calibri, sans-serif; font-size: 15px; "><b><span lang="EN-GB" style="font-family: 'Gill Sans MT', sans-serif; color: rgb(74, 68, 42); ">A</span></b></span><span class="Apple-style-span" style="color: rgb(81, 81, 81); font-family: Calibri, sans-serif; font-size: 15px; "><span lang="EN-GB" style="font-size: 10pt; font-family: 'Gill Sans MT', sans-serif; color: rgb(74, 68, 42); "> PO Box 99814, Newmarket</span></span><span class="Apple-style-span" style="color: rgb(81, 81, 81); font-family: Calibri, sans-serif; font-size: 15px; "><span lang="EN-GB"> </span></span><span class="Apple-style-span" style="font-family: Calibri, sans-serif; font-size: 15px; "><b><span lang="EN-GB" style="color: rgb(192, 0, 0); font-family: 'Gill Sans MT', sans-serif; ">l</span><span lang="EN-GB" style="font-family: 'Gill Sans MT', sans-serif; "><font color="#4a442a">M </font></span></b></span><span style="color: rgb(74, 68, 42); font-family: 'Gill Sans MT', sans-serif; font-size: 13px; ">021 999 990 </span><span class="Apple-style-span" style="color: rgb(81, 81, 81); font-family: Calibri, sans-serif; font-size: 15px; "><b><span lang="EN-GB" style="font-family: 'Gill Sans MT', sans-serif; color: rgb(192, 0, 0); ">l</span></b></span><span class="Apple-style-span" style="color: rgb(81, 81, 81); font-family: Calibri, sans-serif; font-size: 15px; "><b><span style="font-family: 'Gill Sans MT', sans-serif; color: rgb(74, 68, 42); ">P</span></b></span><span class="Apple-style-span" style="color: rgb(81, 81, 81); font-family: Calibri, sans-serif; font-size: 15px; "><span style="font-family: 'Gill Sans MT', sans-serif; color: rgb(74, 68, 42); font-size: 10pt; "> 974 3171</span></span><span class="Apple-style-span" style="color: rgb(81, 81, 81); font-family: Calibri, sans-serif; font-size: 15px; "><b><span lang="EN-GB" style="font-family: 'Gill Sans MT', sans-serif; "> </span></b></span>
</div>
<br><div><div>On 24/04/2013, at 4:13 PM, Heinz N <<a href="mailto:ausnog@equisoft.com.au">ausnog@equisoft.com.au</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">Not everyone has SPF or TXT records. If the MTA enforces SPF, then senders without it will get bounced. Also note that not everyone has control of their DNS. It is sad that there is so little usage of SPF & TXT records in the wild. If *everyone* has SPF then spam would be heavily diminished. Unfortunately there are just too many people who don't like adding extra records in their zone files.<br><br>- Heinz<br><br>On Wed, 24 Apr 2013, Chris Jones wrote:<br><br><blockquote type="cite">Wouldn't a simpler solution be:<br><br>1. Add an SPF record for <a href="http://ausnog.net">ausnog.net</a><br>2. Enforce this on <a href="http://lists.ausnog.net">lists.ausnog.net</a><br><br>??<br><br>- Chris<br><br>On 24/04/2013, at 1:33 PM, Heinz N <<a href="mailto:ausnog@equisoft.com.au">ausnog@equisoft.com.au</a>> wrote:<br><br><blockquote type="cite">On Wed, 24 Apr 2013, Skeeve Stevens wrote:<br><br><blockquote type="cite">So we know where the spam is coming from or how they are subscribing?<br><br></blockquote><br>Reading the headers:<br><br>From: <<a href="mailto:ausnog@ausnog.net">ausnog@ausnog.net</a>><br>To: <<a href="mailto:ausnog@ausnog.net">ausnog@ausnog.net</a>><br><br>I think that the spammers are not subscribing at all. They are exploiting a simple weekness in the MTA configuration.<br><br>I would not dare test this as it might be perceived as an attack, but I suspect that the ausnog MTA will relay if the "RCPT To:" and "MAIL From:" are both reported as from local domain <a href="http://ausnog.net">ausnog.net</a>.<br><br>I had this problem a long while ago and the only way I could get around this was to have 2 MTAs. One "public" one will accept mail to my local domain(s) but it is specifically blocked from relaying for them. The private one will relay for the local domains and is only used for sending out. Now spammers get a nasty bounce message if they try to pretend to be "MAIL From:" any of my local domains, sending "RCPT To:" any of my local domains :-)<br><br>Regards,<br>Heinz N.<br>_______________________________________________<br>AusNOG mailing list<br><a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>http://lists.ausnog.net/mailman/listinfo/ausnog<br></blockquote><br><br></blockquote>_______________________________________________<br>AusNOG mailing list<br><a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>http://lists.ausnog.net/mailman/listinfo/ausnog<br></blockquote></div><br></div></div></body></html>