( )

Size: px

Start display at page:

Download "( )"

いちえいこやぎ
5 years ago
Views:

1 ( ) kazu@iij.ad.jp

4 2 example.jp 投稿ユーザ認証配送ドメイン認証 example.jp

5 ISP/ASP ISP/ASP?

6 ISP A ISP B ASP C (bot)

7 ISP A ISP B 配送配送 ASP C 配送配送 = ( ) = ( ) Submission SMTP

8 ISP A ISP B 投稿ユーザ認証配送 ASP C 投稿ユーザ認証配送 POP before SMTP

9 ISP A ブロック ISP B 投稿ユーザ認証配送 ASP C 投稿ユーザ認証配送 IP IP

10 ISP A ブロック ISP B 投稿ユーザ認証配送 ASP C 投稿配送ユーザ認証

11 ISP A ブロック ISP B 投稿レート制御配送 ASP C 投稿配送レート制御

12 ISP A ブロック ISP B 投稿ユーザ認証レート制御配送ドメイン認証 ASP C 投稿配送ユーザ認証レート制御ドメイン認証

13 ( ) (reputation) IP cloudmark.com % dig iij.ad.jp.rating.cloudmark.com txt iij.ad.jp.rating.cloudmark.com. 1M IN TXT "Status: Good" iij.ad.jp.rating.cloudmark.com. 1M IN TXT "Rating: 100"

14 ISP/ASP ドメイン認証 Yes レピュテーション Yes No No No コンテント Yes フィルタ

16 () ()

17 SMTP over SSL SSL SMTP TLS SMTP SMTP over SSL 465 SMTP over SSL Cisco IETF SMTP over SSL ISP/ASP 465

18 SMTP/Submission over SSL/TLS Submission over TLS ( ) SMTP over SSL ( 465 ) SMTP over TLS ( ) ISP/ASP

19 AT&T Bell CA Bell South Comcast Earthlink MSN Verizon Blocking.aspx WAKWAK(NTT-ME) SANNET

21 IP SPF Sender ID (MFROM) (SMTP MAIL FROM) Sender ID (PRA) ( ) DKIM Yahoo! DomainKeys Cisco IIM Sender ID (PRA) DKIM

22 ドメイン認証結果をヘッダへ受信拒否破棄フィルタリング Authentication-Results: mx.example.jp sender-id=pass; spf=pass

23 IP example.jp example.jp ) SMTP IP 2) SMTP MAIL FROM 3) DNS IP 4) IP

24 SMTP S: 220 mail.example.com ESMTP Sendmail C: EHLO host.example.jp ( ) S: 0 Hello host.example.jp, pleased to meet you C: MAIL FROM:<alice@example.jp> S: 0 <alice@example.jp>... Sender ok C: RCPT TO:<bob@example.com> S: 0 <bob@example.com>... Recipient ok C: DATA S: 354 Enter mail, end with "." on a line by itself C: Subject: A test message C: From: alice@example.jp C: To: bob@example.com C: C: This is a body. C: --Alice C:. S: 0 Message accepted for delivery C: QUIT

25 SPF (Sender Policy Framework) POBOX exmaple.com IN TXT "v=spf1 +a +mx -all" A RR MX RR IP "+" pass "?" neutral SPF RR "~" softfail "-" fail Web exmaple.jp IN TXT "v=spf1 -all" SMTP MAIL FROM

26 Sender ID IETF SPF Caller ID SPF example.com IN SPF "spf2.0/mfrom,pra +a +mx -all" "v=spf1" "spf2.0/mfrom,pra" SMTP MAIL FROM (MFROM) (PRA) PRA = PRA(Purported Responsible Address) Resent-Sender:, Resent-From:, Sender:, From:

27 example.jp 公開鍵秘密鍵 example.jp 公開鍵署名検証 DNS

28 DKIM DKIM-Signature: a=rsa-sha1; d=example.net; s=brisbane c=simple; q=dns; t= ; x= ; h=from:to:subject:date; Subject:demo%20run Date:July%205,%202005%203:44:08%20PM% b=dzdvyofakcdlxdjoc9g2q8loxslenisbav+yuu4z GeeruD00lszZVoG4ZHRNiYzR DNS % dig omgo._domainkey.iij.ad.jp txt omgo._domainkey.iij.ad.jp IN TXT "g=; k=rsa; t=y; p=mfwwdqyjkozihvcnaqebbqadswawsajbam3stvzqy4 dy3csb7rseatdxmsmjgcnwqy8ttvs8nord0487piqs9kwyogx djxfje3plyi0wcnvxofzdasm+4zucaweaaq=="

30 SMAPCOP SBL CBL DSBL BOPM 0 or 1

31 (accreditation) Bonded Sender Program (BSP) IronPort % dig query.bondedsender.org AOL

32 IP IP (BSP ) IP Cloudmark rating IronPort SenderBase IP IronPort CipherTrust TrustedSource

34 DNS JPRS WIDE.jp SPF/Sender ID v=spf1 spf2.0 DKIM _domainkey.example.jp DK

36 SPF SPF RR SPF RR IIJ "?all" SPF "-all"

37 example.com MAIL RCPT MAIL RCPT user unknown MAIL RCPT MAIL FROM:<> RCPT example.jp

38 ISP MAIL RCPT example.com MAIL FROM:<> RCPT ISP = Web SPF AOL

39 Mew.org SPF RR v=spf1 +mx -all... SPF RR

40 Microsoft Sender ID PRA SMTP ISP

41 example.jp SMTP 転送 example.net example.com MAIL RCPT MAIL RCPT SPF Sender ID (MFROM) IP SMTP MAIL FROM SUBMITTER MAIL FROM: Sender ID (PRA) IP Resent-Sender: Resent-Sender: DKIM IP

42 example.jp MLサーバ example.net example.com MAIL RCPT MAIL RCPT RCPT TO:<chris> SPF Sender ID (MFROM) RCPT TO:<dave> Sender ID (PRA) Resent-Sender: Resent-Sender: ML Sender: DKIM

43 example.jp example.com MAIL RCPT MAIL RCPT example.net SPF Sender ID (MFROM) SMTP MAIL FROM SUBMITTER MAIL Sender ID (PRA) Sender: Sender: Sender: DKIM

44 DKIM Content-Transfer-Encoding: Subject: ML Received: ML ML Subject: Received:

45 SMTP MAIL FROM SUBMITTER SMTP PRA SPF DKIM OK

antiabuse.gby

antiabuse.gby ( ) kazu@iij.ad.jp 1 Bot Outbound port blocking (OPB) OPB DKIM SPF SPF SPF 3 004 10 Bot ISP/ASP Bot ( ) 4 Bot ( ) PC Bot ( ) Robot Bot ランダムポート PC PC Bot Windows IP 4 SMTP 6 Bot p j @ a Outbound port blocking