From: Charles Lindsey (chl@clw.cs.man.ac.uk)
Date: Tue Sep 12 2000 - 06:53:57 CDT
In <200009120031.UAA26794@panix3.panix.com> Seth Breidbart <sethb@panix.com> writes:
>> I think that posting-host should be something that is immediately
>> recognisable to a human (and also to a machine) - i.e. an FQDN or IP. If
>> more specific imformation is to be conveyed, then I think a
>> posting-account is the right thing (that can be in a notation which may only
>> be understood by the ISP - just so long as it always contains the same
>> string for the same account).
>I disagree with the latter point; there might be a privacy issue
>involved.
But it doesn't have to be recognisable as a named individual if the
individual and/or the ISP want it that way.
Some ISPs put encrypted versions of the article's origin in X-Trace. That
practice is fine by me (it should go in the "serial" parameter in my
scheme), but do realise that makes it quite useless for filtering.
>However, something that maps reasonably (e.g. line # in the radius
>log) is good enough; a spammer will keep the same code for a full run.
Yes, but not for his next run. Agreed it is better than nothing.
-- Charles H. Lindsey ---------At Home, doing my own thing------------------------ Email: chl@clw.cs.man.ac.uk Web: http://www.cs.man.ac.uk/~chl Voice/Fax: +44 161 437 4506 Snail: 5 Clerewood Ave, CHEADLE, SK8 3JU, U.K. PGP: 2C15F1A9 Fingerprint: 73 6D C2 51 93 A0 01 E7 65 E8 64 7E 14 A4 AB A5