Skip Links

Network World

  • Social Web 
  • Email 
  • Close

Quick fix is no fix for spam

Telecom Catalyst By Daniel Briere , Network World , 03/08/2004
D. Briere
  • Share/Email
  • Comment
  • Print

Every time I see a government official or someone on CNBC talk about improving U.S. productivity, I immediately think of the obvious solution - find a way to stop spam, and you'll see productivity increase tremendously.

I'm not advocating a governmental or legislative answer; what we need is a technology breakthrough. But what we're getting are quick fixes that might create more problems than they solve. What I'm specifically against are the easy, blanket answers to which many large providers resort because they can't move fast enough to really deal with the problem in a more technically advanced way.

Take Time Warner's Road Runner service. I've had problems with Road Runner blocking various domains associated with some of my clients. Road Runner says it uses outside lists to manage its spam attacks and even offers up whitelists it accesses to find legitimate e-mailers. However, Road Runner also will block ranges of IP addresses from ISPs that have allowed spam to come from any server in their subscriber base. That definition of "spammer" pretty much covers every ISP in the U.S.

My company uses two ISPs, InterNap and Media3, and both have the same problem with Road Runner: They are regularly being classified as spam sources, and they have to undertake about a two-week process to get the specific IP addresses of non-spamming clients cleared up. And in that time frame, no e-mails from any of the IP addresses in their IP ranges can get through to Road Runner subscribers.

Right now, we're having to work through just this issue with Road Runner to get e-mail turned back on so we send e-mail on the Road Runner system. So despite its claim to a high level of sophistication, Roadrunner takes the "throw the baby out with the bathwater" approach by cutting off the ISP and the IP range altogether. This Road Runner problem hits us every two or three months, and each time it takes two weeks to resolve. The most irritating part about all this is that Road Runner does not notify the sender that it is deleting the inbound e-mails; it just sends an admin-class e-mail to the originating server, so you never know your e-mails are not arriving.

The same problem exists with network-based virus protection, something we all agree we need. My cable modem provider, Charter Communications, responded to the Blaster virus last summer by turning off User Datagram Protocol (UDP) on the network. Sure, this stopped the Blaster virus from spreading on its network, because the Blaster virus used UDP to find other potential hosts across the network. But in Charter's infinite wisdom to protect me from the viruses, the company also disabled my Trend Micro virus-protection software's ability to update itself over the network. So I found myself cut off from Internet resources with no notification and no clue why.

  • Share/Email
  • Comment
  • Print
Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.

Download the white paper.

Applications: taking back control

Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.

Learn more today.

Comment
Login
Forgot your account info?
Add comment
Anonymous comments subject to approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed