From: /dev/rob0 (rob0gmx.co.uk)
Date: Wed Aug 23 2006 - 14:35:00 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Wednesday 23 August 2006 13:10, Todd S. Florman wrote:
> Because we are a pretty large bandwidth service provider, our servers

Is this twtelecom.net?
    http://www.spamhaus.org/sbl/listings.lasso?isp=twtelecom.net

> have quite a few domains that we act as backup MX for so we don't
> have any user maps so anything sent to one of the domains we service
> must be accepted so long a it passes the usual sanity checks, such as
> non fqdn or unknown hostname, sender, reipient, RBL lists, etc.

Spam is spam, no matter how large you are. If you refuse to DTRT and
validate recipients in the initial SMTP dialogue, you are and will be
treated like a spammer.

Here's one, a twtelecom.net customer:
    http://www.spamhaus.org/sbl/sbl.lasso?query=SBL34979
No, not exactly accept-then-bounce backscatter, but similar.

There are technical and political workarounds for your refusal to
maintain user maps. Technical: reject_unverified_recipient, see
ADDRESS_VERIFICATION_README.html . Political: require customers of your
backup MX service to maintain their own user maps via some Web
interface, and enforce ToS that require them to accept all mail from
the backup MX. (Penalize violations.)

Funny thing: I bet that if you do this, your tuning problems will
vanish. And if you don't do it now, you'll do it eventually, because
your customers won't like being blacklisted.
--
    Offlist mail to this address is discarded unless
    "/dev/rob0" or "not-spam" is in Subject: header

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]