[Asrg] where the message originated (was: DKIM role?)

[SM]

At 13:05 08-01-2009, Franck Martin wrote:
>on 4) for information there is this blocking list:
>http://www.uceprotect.net/en/rblcheck.php?ipr=202.170.42.206
>
>but it tends to block by AS number and in the above case, AS9241 is 
>the whole country of Fiji.

That shouldn't be a problem if you don't communicate with people from Fiji. :-)

>Also as a note, I think dealing with high volume mail sender is not 
>the issue, they are known, we know their technics, etc... it is more 
>to deal with the long tail of little companies, organisations, small 
>ISPs, etc..

Some receivers may view these small organizations as statistically 
insignificant.  These small organizations generally adopt antispam 
policies without analyzing whether such policies can have a negative 
impact on them in future.

At 09:44 09-01-2009, Douglas Otis wrote:
>White-listing based upon a domain would be dangerous without also
>including the IP address of the SMTP client and message tracking.
>There are companies currently providing this service, particularly
>needed where spam remains largely unmanaged.

The question was whether it is important to note where the message 
came from.  I take it that your answer is yes.

>The algorithm can remain oblivious to who owns the SMTP client.  It
>determines whether a conversation was observed, while also allowing
>also users to submit corrections.

That only works as long as the two end-points for the conversation 
are static.  Such a constraint is only acceptable to users until they 
move around and experience a communication failure.

Regards,
-sm