> I still say removing all the RDNS records for all those customer > cable modem addresses would make it easy enough for us to refuse > them at the gateways.
"All those" meaning the zombies? The prob with that is that without the PTR, you don't have a near-authoritative way of knowing that they are a Comcast block anymore, so you can't do a sure-fire combo test--and it's still not feasible for many servers to reject on no PTR alone. Now, _changing_ the PTR to include 'abuser-' would be interesting. :) > I just can't see port 25 blocking as a good idea...it just makes the > users into forgers, and that's just as bad. Hmm...don't agree with that. Designating the Comcast MXs in SPF records eliminates the suspicion of forgery in the sense that I think you're using. Unfortunately, that is the theoretical side; in practice, the fact is that many of the high-falutin' providers do not know how to provision mail services for uptime and performance, and thus smarthosting through consumer-level gateways is often completely unacceptable. Still, I take the position that $18 billion companies should apportion funds to police abuse at any level. If, because of lack of interest or claimed lack of funds, they can't do the job on their outgoing mail--even with the tacit approval of the privacy hounds for egregious misuse--they should be hit hard. Anyway, if their selective "reconfigure the cable modem" method works, that would theoretically be fine, but why on earth are they so afraid to do this at the core, instead letting hackable CPE do the job? --Sandy ------------------------------------ Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange Addresses into IMail Aliases! http://www.mailmage.com/products/software/freeutils/exchange2aliases/download/release/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
