ORBS (Re: Scanning)

Roeland Meyer rmeyer at mhsc.com
Sun May 27 16:11:39 UTC 2001

> From: E.B. Dreger [mailto:eddy+public+spam at noc.everquick.net]
> Sent: Sunday, May 27, 2001 8:05 AM

> ORBS catches far more than MAPS. 

As Randy stated "so does a hydrogen bomb". The problem is target acquisition
and [the lack of] discrimination. The REASON tactical nukes aren't used
regularly is the collateral damage issue.

> My take is that anybody who has a
> problem with the infrequent ORBS probes should have a huge 
> problem with the daily bombardment of relay attempts.

A system that tests positive for ORBS , yet is using MAPS, will not be used
as a spam relay. Yet, ORBS will list such a system.

> Bottom line:  Blocking mail from rogue servers is the best way to stop
> spam and to not be a party to somebody else getting 
> relay-raped.  Anyone with clue closed relays how many years ago?

It is more accurate to state that most folks have placed guards on their
mail systems.

> I don't buy the "we need open relay for nationwide users" argument,
> either.  Build a cheap MX that does nothing but take mail from a given
> POP, and send it to the world.  Anti-spoofing at the border, 
> don't accept mail from the outside world, and you're done.

You must not have a roaming staff or are willing to keep telcos wealthy.

More information about the NANOG mailing list