Re: [swinog] Re: blocking ports? - swinog

13 Apr 2007

: but still voting to block mail from dialup and adsl ranges

On DHCP DSL ranges.  I see some businesses that have a legitimate email server on
statically assigned DSL ranges...

scott

--- roger(a)mgz.ch wrote:

From: "Schmid" &lt;roger(a)mgz.ch&gt;
To: &lt;swinog(a)swinog.ch&gt;ch>, &lt;surfer(a)mauigateway.com&gt;
Subject: Re: [swinog] Re: blocking ports?
Date: Fri, 13 Apr 2007 10:32:28 +0200

isn't the most spam comming via compromized Computers ? 
adsl Dynamic or  dialup user you should never trust them if the say the dont spam.
they have to send mail the way smtp is thought for, that means send email to the smtp
relay next to you. prevent him to send email via any other relay.
if this would be consequent done by all ISP most of the spam would dissapear, and we could
concentrate to prevent abusing other system for doing their harmfull work. 

Funny thing is one ISP is switching off his SMTP relay telling the client to use other
smtp relay in the wild and call that a first action according to the "stop spam"
campaign. 
another one is blocking port25 und force the user to use the ISP?s SMTP Relay and even
explain this is done due to the "stop spam" campaign 

how to believe anything ?

confused .... but still voting to block mail from dialup and adsl ranges ;-)

---------- Original Message ----------------------------------
From: "Scott Weeks" &lt;surfer(a)mauigateway.com&gt;
Reply-To: swinog(a)swinog.ch, surfer(a)mauigateway.com
Date:  Thu, 12 Apr 2007 11:19:56 -0700

...

Hello,

: So if a customer proofs that he is able from a technical 
: Point of view to operate an mail server in a secure manner 
: and assures not to abuse email for spam then it's not 
: acceptable that an ISP block anything to him.

This is what I was saying to the guys here at my work.  We just need a small proof that
the customer isn't a spammer and we open it up.  However, most of our customers are
less-technical savy home folks.  Did you have to prove to your ISP that you weren't
spamming?  If so, how did they have you do that?

Thanks,
scott

--- Peter.Bickel(a)idv.ch wrote:

From: Peter Bickel &lt;Peter.Bickel(a)idv.ch&gt;
To: swinog(a)swinog.ch, surfer(a)mauigateway.com
Subject: Re: [swinog] Re: blocking ports?
Date: Thu, 12 Apr 2007 12:03:28 +0200

Scott Weeks schrieb:

 : You'd be amazed how many companies operate their own 
 : mail servers, even behind dynamic addresses

 I'm speaking with guys in my company on an issue and part of the discussion has to do
with me saying no one runs a mail server from behind a dynamic IP addresses.  Other than
just your experiences, does anyone have pointers to data on folks that do this?

 scott 
Hi Scott

we do exactly this for IDV & Network Consulting. We operate our own 
Mailserver
(Solaris with sendmail and iamp) in our internal Network which is 
connected to
Cablecom (DHCP ;-)) In addition we have some Maschines in a hosting 
environment
which have of corse fixed IP addresses which we use to relay to the outside.
All hosts use Solaris and sendmail and are protected with IPFilter with very
restrictive Rules. Incomming email is going through the external hosts and
an IPIP Tunnel directly to the internal mail server.

We really don't want to be dependend on an ISPs email SETUP. DNS is the
same which helped me in the past a lot where several customers weren't able
to use the net everything worked for us. So if a customer proofs that he
is able from a technical Point of view to operate an mail server in a
secure manner and assures not to abuse email for spam then it's not 
acceptable
that an ISP block anything to him.

 --- swinog-list(a)dudes.ch wrote:

 From: Markus Wild &lt;swinog-list(a)dudes.ch&gt;
 To: swinog(a)swinog.ch
 Subject: Re: [swinog] Re: blocking ports?
 Date: Wed, 11 Apr 2007 19:26:39 +0200

 Jonathan,

  Sorry but I disagree with Per.  ISPs have a duty
to prevent email
 Spam which is a terrible curse for us all.  If they decide that
 blocking port 25 outbound will help then they should do it.

 If you are a user, why can't you use the ISPs relay server? If you
 are a provider you ought to have your own mail server on a fixed IP
 address. 
 You'd be amazed how many companies operate their own mail servers, even
 behind dynamic addresses (in which case they usually use some mailbox
 polling mechanism to feed their server from mail from the outside), but
 send outgoing mail directly with SMTP.

  Of course, one day we need a better protocol than
SMTP (*Simple* Mail 
 Transfer Protocol) which was never meant as a global email solution.  
 But until then we have to do something to stop people abusing it. 
 But by killing the payload, not the messenger, please... 

 Cheers,
 Markus
 _______________________________________________
 swinog mailing list
 swinog(a)lists.swinog.ch
 http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

 _______________________________________________
 swinog mailing list
 swinog(a)lists.swinog.ch
 http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog 

-- 

Gruss
        Pitsch

__________________________________________________________________________

Peter Bickel                            e-mail:  bickel(a)idv.ch
IDV & Network Consulting                Telefon: +41  1 853 24 16
Gumpenwiesenstrasse 38                  Fax:     +41  1 853 27 04
CH-8157 Dielsdorf                       Mobile:  +41 79 666 15 50

__________________________________________________________________________

_______________________________________________
swinog mailing list
swinog(a)lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

________________________________________________________________
Sent via the WebMail system at mgz.ch