Spam Block: Public Servants or Vigilantes?
From Wayde York
No one likes SPAM (the email variety.) Every responsible user of the Internet and surely every responsible information security professional would agree that anti-spam efforts are needed and likely should be expanded.
What happens, however, when the Internet-based anti-spam agents become a hindrance to business? While there over 70 anti-spam “service providers” that live on the Internet, a handful provide most of the information to business, government and academics users.
The service provided is usually a list of IP addresses from which to block SMTP or other email activity. One of the larger providers noted that their customers are “the few thousand corporations taking twice-hourly block list transfers.”
Most of these organizations publish block lists regarding open SMTP relays which can be used by spammers. One provider looks for email Non-Delivery Reports (bounces) that go further than local users of the email server.
In the words of one spam blocker, “A single infected machine sending spam out through a network utilizing NAT can result in blocked email from the whole LAN.”
So I ask, does building block lists of IP addresses that are “apparently” spammers and distributing this list without notifying the offending party vigilantism or service provision?
I lean toward them being vigilantes. Perhaps if a mechanism was in place to warn the alleged spammer they are about to be blocked, the service would seem more friendly…
Continued: https://www.infosecisland.com/blogview/3294-Vigilantes-or-Public-Servants.html
All content from Information-Security-Resources.com will begin migrating to the Infosec Island Network:
We are pleased to announce that Infosec Island™ has acquired www.information-security-resources.com, one of the leading online news portals addressing security issues.
The two infosec communities will continue to be operated separately while ISR’s content is gradually migrated to the Infosec Island framework by mid-year.
Don’t miss out on your opportunity to win one of over $10k in service prizes in the Infosec Island Q1 Membership Drive!
Only completed profiles are automatically entered into the drawing. Registration is quick - it takes less than five minutes to complete.
Prizes include:
• The Grand Prize is a FREE core server license, including maintenance, of the Grid Data Security’s Enhanced Authentication Solution from SyferLock™. This prize has a value of up to $10,000.
• Second Prize – The member winning second prize will receive two myKryptofon security software products from I.D. Rank Security, valued at $690.
• Third Prize – Two third prize winners will receive an EncryptStick™ software application download from Onix International Inc.
Register now and win! https://www.infosecisland.com/
We are also seeking active security bloggers and forum moderators - a great way to increase your exposure and generate more business opportunities for your company.
Contact Anthony through your Island email account, or directly at afreed@WireHeadSecurity.com for more details!
Infosec Island is committed to serving the needs of SMBs and mid-market enterprises across many industries, as well as nonprofits, government agencies and educational organizations and the infosec community at large.
Copyright © 2009 - 2010 WireHead Security, LLC. All rights reserved.
* * *
Stay Informed With ISR News Alerts:
* * *
Follow us on Twitter
Filed under: Cloud computing, D&O Liability, Financial, Government, Infosec Island Network, Insider Threat, Internet Security Alliance, Military, PCI, Sarbanes-Oxley, due diligence, hackers, healthcare, identity-theft, malware, national security, privacy, reach, virtualization
Comments
Tell me what you're thinking...
and oh, if you want a pic to show with your comment, go get a gravatar!













