Taiwan Network Information Center Spam Status & Anti-Spam Schemes in Taiwan Taiwan Network...

17
Taiwan Network Information Center Spam Status & Anti-Spam Schemes in Taiwan Taiwan Network Information Center David Chen [email protected] Sep 5, 2002

Transcript of Taiwan Network Information Center Spam Status & Anti-Spam Schemes in Taiwan Taiwan Network...

Page 1: Taiwan Network Information Center Spam Status & Anti-Spam Schemes in Taiwan Taiwan Network Information Center David Chen David@twnic.net.tw Sep 5, 2002.

Taiwan Network Information Center

Spam Status & Anti-Spam Schemes in Taiwan

Taiwan Network Information Center

David Chen

[email protected]

Sep 5, 2002

Page 2: Taiwan Network Information Center Spam Status & Anti-Spam Schemes in Taiwan Taiwan Network Information Center David Chen David@twnic.net.tw Sep 5, 2002.

© Taiwan Network Information Center

Outline

The Effect of Spam Current Anti-Spam Strategies ASTF The Obstacles of Schemes

Page 3: Taiwan Network Information Center Spam Status & Anti-Spam Schemes in Taiwan Taiwan Network Information Center David Chen David@twnic.net.tw Sep 5, 2002.

© Taiwan Network Information Center

The Effect of Spam (1)

Net Consumers Association Taiwan made a public opinion poll report

– 1/3 people spend 10 mins to handle spam every day

– Over 70% people feel annoyed

– 75% people say they don’t want to receive spam any more

– 90% people think it’s unfair to share the cost of spam including ISP

– 2/3 people in favor of introducing appropriate law, the other third say it’s not necessary

Page 4: Taiwan Network Information Center Spam Status & Anti-Spam Schemes in Taiwan Taiwan Network Information Center David Chen David@twnic.net.tw Sep 5, 2002.

© Taiwan Network Information Center

The Effect of Spam (2)

– The Cost of Spam End user

– US$1,830 Million a year– Waste of internet resources, waiting time and mail serve

r crush ISP

– Wasting bandwidth cost US$8 Million a year– Hardware renew, Software develop and maintainer’s co

st can’t evaluate

Source : http://www.net080.com.tw/stand/junk_mail_press.htm

Page 5: Taiwan Network Information Center Spam Status & Anti-Spam Schemes in Taiwan Taiwan Network Information Center David Chen David@twnic.net.tw Sep 5, 2002.

© Taiwan Network Information Center

IP/netmask amount IP/netmask amount

61.223/16 64801 211.73.32/19 8192

61.224/16 64801 211.73.96/19 8192

61.226/16 64801 211.73/19 8192

61.227/16 64801 211.73.176/20 4096

211.78/16 64800 211.73.192/19 4096

61.219/16 64800 203.70/16 512

61.221/16 64800 61.16/16 512

61.225/16 64800 163.31/16 256

211.74/16 64799 168.95/16 256

211.79/16 64799 202.129.192/18 256

61.222/16 64799 202.134.64/19 256

211.75/16 64798 202.178.128/17 256

211.76/16 64798 202.39/16 256

211.77/16 64798 210.17/17 256

211.72/16 40041 210.201.192/18 256

211.73.128/19 8192 210.59/17 256

211.73.160/20 8192 61.13/16 256

211.73.224/19 8192 140.126/16 189

Blocked IP : 1,008,354

Taiwan IP blocked list in spam.dnsrbl.net (RBL)

Total IP : 11,455,744 Aug.15, 2002

Page 6: Taiwan Network Information Center Spam Status & Anti-Spam Schemes in Taiwan Taiwan Network Information Center David Chen David@twnic.net.tw Sep 5, 2002.

© Taiwan Network Information Center

The Effect of Spam (4)

IP blocked rate of the 3 major Taiwan ISPs

Top 3 ISP

In Taiwan

Blocked IP

amount(/24)Blocked IP/ Total blocked

Blocked IP/Total allocated

HiNet 2437 62 % 25.7 %

SeedNet 256 6.5 % 11.1 %

TANet 3 0.8 % 0.14 %

Aug.15, 2002

Page 7: Taiwan Network Information Center Spam Status & Anti-Spam Schemes in Taiwan Taiwan Network Information Center David Chen David@twnic.net.tw Sep 5, 2002.

© Taiwan Network Information Center

The Effect of Spam (5)

Top ISPs with blocked IP

Rank ISPBlocked IP amount (/24)

Blocked IP /Total blocked

Blocked IP /Total allocate

1 HiNet 2437 62 % 25.7 %

2 FetNet 286 7.3 % 49.7 %

3 SeedNet 256 6.5 % 11.1 %

4 Savecom 64 1.6 % 25 %

5 Pagic 48 1.2 % 21.4 %

6 Netpoly 48 1.2 % 60 %

7 Dome 48 1.2 % 60 %Aug.15, 2002

Page 8: Taiwan Network Information Center Spam Status & Anti-Spam Schemes in Taiwan Taiwan Network Information Center David Chen David@twnic.net.tw Sep 5, 2002.

© Taiwan Network Information Center

Current Anti-Spam strategies (1)

ISP Network Administrator– Set up the channel for complainants – Educate and announce anti-spam policies– Close open relay function on the mail serve

r– Filter outgoing spam on the Router or Mail

Server temporarily– Block incoming spam on the Router or Mail

server temporarily– Manage and log dynamic IP user behavior– Terminate spamers’ connections

Page 9: Taiwan Network Information Center Spam Status & Anti-Spam Schemes in Taiwan Taiwan Network Information Center David Chen David@twnic.net.tw Sep 5, 2002.

© Taiwan Network Information Center

Current Anti-Spam strategies(2)

Mail Server Administrator– Filter outgoing and block incoming Spam– Self-detect open relay function

Instruction refer to http://spam.gsnmm.gov.tw

– Close open relay function Instruction refer to http://mail-abuse.org/tsi/ar-f

ix.html

User– Filter mails– Delete mails

Page 10: Taiwan Network Information Center Spam Status & Anti-Spam Schemes in Taiwan Taiwan Network Information Center David Chen David@twnic.net.tw Sep 5, 2002.

© Taiwan Network Information Center

Current Anti-Spam strategies(3)

TWNIC Anti-Spam Plan – Filtering IP or domain name on Router port:

25 Temporarily– Using mail server procmail function to chec

k spam pattern in procmailrc.spam file– Using mail server access.db function to filte

r IP or domain name– Setting up mail server sendmail.cf to check

sender’s IP ON LINE through DNS query

Page 11: Taiwan Network Information Center Spam Status & Anti-Spam Schemes in Taiwan Taiwan Network Information Center David Chen David@twnic.net.tw Sep 5, 2002.

© Taiwan Network Information Center

Current Anti-Spam strategies(4)– Using RBL DNS

Check Spam List – Spam.dnsrbl.net– Blackholes.mail-abuse.org– Rsbl.aupads.org– Tbl.maps.vix.com

Check Dial Up IP List– Duinv.aupads.org– Dul.maps.vix.com

Check Open Relay List– Orvedb.aupads.org– Relays.mail-abuse.org– Relays.orbs.org

Page 12: Taiwan Network Information Center Spam Status & Anti-Spam Schemes in Taiwan Taiwan Network Information Center David Chen David@twnic.net.tw Sep 5, 2002.

© Taiwan Network Information Center

ASTF (1)

Anti-Spam Task Force (ASTF)– established by TWNIC on June 2002

– Free membership– Encourage all major ISPs to join – Goals

To reduce spam To protect users from Getting SPAM To educate users NOT spamming and filtering To coordinate ISPs and jointly find out the soluti

on No more blocked IP from Taiwan

Page 13: Taiwan Network Information Center Spam Status & Anti-Spam Schemes in Taiwan Taiwan Network Information Center David Chen David@twnic.net.tw Sep 5, 2002.

© Taiwan Network Information Center

ASTF (2)

Implementation– Promote Anti-Spam awareness

Setup WEB sites http://spam.886.info Seek new technology or mechanism

– Create tw-anti-spam mail list for ASTF members

Page 14: Taiwan Network Information Center Spam Status & Anti-Spam Schemes in Taiwan Taiwan Network Information Center David Chen David@twnic.net.tw Sep 5, 2002.

© Taiwan Network Information Center

ASTF (3)Discussing Topics in the mailing list

– Do we need a new TW-RBL ? It’s still a controversial issue

– Should we build a RT System to track SPAM complaints ?

Most of members say Yes

– Do we need to build a WEB site for publishing anti-spam knowledge how to handle spam ?

Yes, It’s under construction

– Do we need to create a review procedure to determine and deal with spamers IP ?

Yes, but not now

Page 15: Taiwan Network Information Center Spam Status & Anti-Spam Schemes in Taiwan Taiwan Network Information Center David Chen David@twnic.net.tw Sep 5, 2002.

© Taiwan Network Information Center

ASTF (4)

Management and Law – Management regulation for Government Se

rvice Network, GSN – Legislating “Electronic advertisement mail

management law” draft to against spam Clarify sender message Permitted by receiver in advance Against unfair network cost to end user Restrict advertise mail usage Indemnity to victim

Page 16: Taiwan Network Information Center Spam Status & Anti-Spam Schemes in Taiwan Taiwan Network Information Center David Chen David@twnic.net.tw Sep 5, 2002.

© Taiwan Network Information Center

The Obstacles of Schemes

Defining Spam criteria is difficult Small group of people like Spam ISPs may lose some customers ISPs may not apply the new RBLs Legislation is a long process

Page 17: Taiwan Network Information Center Spam Status & Anti-Spam Schemes in Taiwan Taiwan Network Information Center David Chen David@twnic.net.tw Sep 5, 2002.

© Taiwan Network Information Center

Thank You