Notes on Anti-Spam RG at IETF 61

Work to be encouraged

• Abuse reporting
• Analysis and characterization of spam
• BCPs (Best Current Practices RFCs)
• Filtering standards
• Identity, Authentication and Reputation
• Inventory of problems
• Message Verification (e.g. signatures)
• SMTP Session Verification

SMTP Session verification

• That the receiving server knows something verifiable about the sending server
• no recent action
• MARID
• SPF (Sender Policy Framework), CSV (Client SMTP Validation)

Server Index Query Protocol (SIQ) for Email Reputation and Identity

Developed by April Lorenzen of Server Authority, Inc.

Purpose: to provide inbound email servers with identity/reputation data from a remote 3rd party or LAN source

• Reputation server: is this centralized/federalized?
• Domain+IP query using UDP
• SIQ in production use since July 2003
• Sendmail filters and MS Exchange plug-in
• Forwarding breaks reputation systems - odd hack to mitigate this.
• More detail at http://wiki.OutboundIndex.net/VarA

-- LisaDusseault - 12 Nov 2004