Randy Bush wrote:
this is what i call shooting in the dark. what are OBJECTIVE METRICS? for example, can operators measure and publish alpha and beta error rates on a selection of sites of different flavors so we can decide when they are low enough for our flavor of site to enable rdns filters?
The only usable metric you have, Randy, is the amount of collateral damage you would face on your network if you turned on rDNS. Trust me, the error rates on sites would vary widely, especially because you cannot assume a standard / uniform population of people sending mail to these sites. People who mail IETF lists, and people in asia, sending mail to a local list server in the rDNS-less desert that is some parts of APNIC land, might have completely different perceptions on the issue. Now, from your logs, just how much legitimate mail do you get that comes from an IP without PTR RR, and how much is that expressed as a percentage of legitimate incoming mail to your lists? How much is that as a percentage of spam inbound to your list [to be fair, let's make it "spam that would not have been stopped by your other filters]? srs
Now, from your logs, just how much legitimate mail do you get that comes from an IP without PTR RR, and how much is that expressed as a percentage of legitimate incoming mail to your lists? How much is that as a percentage of spam inbound to your list [to be fair, let's make it "spam that would not have been stopped by your other filters]?
well, it's gonna be hard to quantify what spam filters, bounces, ... rejected, and especially to associate them with smtp connections. but here are some simple data. yesterday, a saturday (gmt clock) 48293 total incoming smtp connections 6226 from ip addresses for which no ptr exists (12.89%) 12416 unique ip addresses which connected to server 3112 unique ip addresses for which no ptr exists (25.06%) some inferences might be drawn, but i am hesitant to do so. what numbers do YOU have for your server(s)? randy
Now, from your logs, just how much legitimate mail do you get that comes from an IP without PTR RR, and how much is that expressed as a percentage of legitimate incoming mail to your lists? How much is that as a percentage of spam inbound to your list [to be fair, let's make it "spam that would not have been stopped by your other filters]?
btw, i did give you a cursory answer to this. and i asked if you would provide some data. randy, waiting
participants (2)
-
Randy Bush
-
Suresh Ramasubramanian