(keitai-l) Re: docomo and spam

From: Juergen Specht <js_at_nooper.com>
Date: 06/20/01
Message-ID: <1468896101.20010620163958@nooper.com>
> since all email is routed thru their servers,
> docomo could potentially detect spammers by noticing IP addresses
> that are sending an unusual amount of email.

It is not as easy. You need about 55 regular expressions in
a 'proxy' mailserver to stop 99% of all Internet spam. I was
involved in testing of the very first version of Mailshield
some years ago:

http://www.mailshield.com

And it is extremly effective, just the finetuning takes a
while since a lot of people are using their company email
account but send mail from their home provider and you
don't want to refuse this simple 'faked' headers, right?

So there is a technical and affordable way to stop Internet
spam out there. Why am I talking about Internet spam all the
time? Who ever analyzed i-mode spam will often see that the
spammers are pretty new to their business and use their very
easy identifyable home or company mailserver to send out
spam. Why are they so stupid sometimes? Because the receiver
can not see the headers which identify the sender and not
really much people understand mailheaders, so they think
that the sender (the FROM field) is the real sender and
complain about this address, which is normally faked. Hu, so
how can I see the header of the email? Just forward a spam
mail to your Internet email account and you get the full RFC
compliant email including all headers. With this information
it's possible to complain, in case you know what you are
doing and the sender is not using a stealth spam program.

The only way to stop a spam mail is to identify and parse a
whole email in the moment his (or his hijacked) mailserver
is connected to your mailserver (the SMTP protocol
allows almost endless timeouts) and refuse the delivery
if it is identifyed as a faked one.

What about laws? Killing is also not allowed and nobody
does it, right? Right? RIGH AAAAAaaaarghhh....

Juergen
--
Juergen Specht  [ Nooper.com - Mobile Services Inc. ]  http://nooper.com
New: i-mode/iAppli testing service NooperLabs: http://nooper.co.jp/labs/


[ Did you check the archives?   http://www.appelsiini.net/keitai-l/ ]
Received on Wed Jun 20 10:30:26 2001