Re: Input on identities

[Doug Royer <Doug@xxxxxxxxx>]

Markus Stumpf wrote:

> On Thu, Apr 08, 2004 at 11:05:12AM -0600, Doug Royer wrote:
>  
>
> > Most ISPs will not push reverse DNS entries for domains where they are not
> > the primary DNS because they can not verify you have the right to use
> > that domain without some labor cost to them, so they do not do it.
> >    
>
> It is not the task of the ISP to verify this.

Your right. But who get blamed when it is wrong? Who gets the spam
complaints?

The owner of the IP address space gets the spam complains because the
spammer faked the other information and nothing has been changed from the
way it is now, so why would the ISP bother to do care abut the
reverse DNS entries? In fact it is an incentive to NOT make the
reverse entries go to the customer, so that the spam complaints
can be tracked to the owner of the IP space so they can
turn off the offending site.

Spammers are not going to inform their ISP they are about to break
with the contract with the ISP and send spam. If forced to tell
the ISP a reverse DNS entry, and if it is true that the ISP is not 
responsible
for the accuracy of those records,  the spammer can set it to invalid.com
and send the email anyway. What is gained other than an invalid reverse
entry that may cause the owner of invalid.com to get complaints?

My question really is "Why bother?" and "What is gained?".

It does not seem add any more accuracy to the tracing unless the ISP takes
the responsibility to make sure they are accurate - and there is no way
to manage that when the ISP is not the  DNS server for that domain.

--

Doug Royer                     |   http://INET-Consulting.com
-------------------------------|-----------------------------
Doug@xxxxxxxxx                 | Office: (208)520-4044
http://Royer.com/People/Doug   | Fax:    (866)594-8574
                              | Cell:   (208)520-4044

             We Do Standards - You Need Standards

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature