OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Ralf Hildebrandt (Ralf.Hildebrandtcharite.de)
Date: Wed Apr 24 2002 - 03:18:56 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Wed, Apr 24, 2002 at 03:03:56AM -0500, Chip Rosenthal wrote:

    > There is RFC-2142, although I'd be surprised if it's advanced to a
    > full standard. It seems more appropriate as a BCP to me.

    RFC2142 is the first RFC to formally codify the longstanding
    <abusedomain.tld> concept which had long existed mainly as a rule of
    thumb.

    It says, in part:

     Most organizations do not need to support the full set of mailbox
    names defined here, since not every organization will implement the
    all of the associated services. However, if a given service is
    offerred, then the associated mailbox name(es) must be supported,
    resulting in delivery to a recipient appropriate for the referenced
    service or role.

     Section 4 of RFC2142 specifies the purpose of the abuse (and other)
    local-parts:

     Operations addresses are intended to provide recourse for customers,
    providers and others who are experiencing difficulties with the
    organization's Internet service.

     It is, therefore, a widely-held misconception that abusedomain only
    needs to work for Internet Service Providers. Instead, it should work
    for any "organization" for which e-mail service exists, whether that
    service is provided to one user or one million.

    It is also a widely believed, but inaccurate, that the abusedomain
    requirement is a suggestion and nothing more. Section 1 of RFC2142
    explains very clearly that it is a must criteria:

     However, if a given service is offerred, then the associated mailbox
    name(es) must be supported, resulting in delivery to a recipient
    appropriate for the referenced service or role.

     Given that, the listing criterium is that any domain for which
    abusedomain is rejected, times-out, or for any other reason cannot be
    delivered, that shall be considered grounds for listing, excepting as
    such that if the rejection is obviously based on some criteria which
    reject the sender. (Unlike the rules regarding "postmaster", nothing
    requires the abuse address to accept from "everyone", so if someone
    has blocked a particular host from sending mail to that server, that
    could conceivably include blocking mail destined for the abuse
    address). However, if this exemption is abused (e.g., a site claiming
    that "abuse" has elected to receive mail from only two other places),
    that site will no longer be allowed to partake of that exemption.

    -- 
    Ralf Hildebrandt (Im Auftrag des Referat V A)   Ralf.Hildebrandtcharite.de
    Charite Campus Virchow-Klinikum                 Tel.  +49 (0)30-450 570-155
    Referat V A - Kommunikationsnetze -             Fax.  +49 (0)30-450 570-916
    The number of the beast - vi vi vi.
    

    - To unsubscribe, send mail to majordomopostfix.org with content (not subject): unsubscribe postfix-users