IT Security & Network Security News & Reviews - eWeek




Google Named No. 3 Spam Provider





  Table of Contents:
  1. Google Named No. 3 Spam Provider
  2. Blocking Spam

New forms of spam and similar abuse find a welcome home at Google, and the company doesn't yet seem up to the security task of fighting them. Perhaps it's a responsiveness issue.

Google Named No. 3 Spam Provider - Blocking Spam
( Page 2 of 2 )

 

Spammers and other abusers are constantly attacking and testing networks. If an ISP's abuse team is unwilling to listen to outside complaints and take them seriously, then testing will be missed and perhaps develop into full-scale abuse, perhaps a botnet. Now that's expensive for an ISP.

The flip side of port 25 blocking is the Spamhaus PBL or Policy Block List. Absent special arrangements between a user and a service, the user ranges at consumer ISPs can be said not to be legitimate sources for SMTP traffic. The PBL is a list of such ranges that recipients can block wholesale, and then put in exceptions as warranted.

And it's not just spam that gets ISPs on lists like this. The Spamhaus Top 10 also reflects hosting of spam URLs, fast-flux DNS servers and other abusive practices. Look at the Spamhaus complaint list for Google, for example, and you'll see more than one incident related to hosting of spam URLs on blogspot.com. There are also many complaints about docs.google.com being used as a spam redirector.

And since this is a chance to take a dig at it, I'll note that my own ISP, verizon.com, is listed at No. 9 and is the source for the infamous Gevalia coffee spam.

I actually think the spam abuse flood currently sweeping over Google caught the company by surprise, as it did Yahoo and Microsoft in their day. Think of the work it must have taken for Microsoft and Comcast to dig themselves out of this hole. Of course, Microsoft may be No. 11 and I wouldn't know, but Cox said Comcast, in recent years, has become "an impressively proactive ISP and they stomp out a lot of abuse as soon as their people are aware of it."

So ISPs really can turn it around if they're willing to do the right thing. There's no doubt in my mind that the work an ISP does to eliminate this sort of abuse from its network will also improve the quality of experience and support for users, especially its own, but also outsiders.

Security Center Editor Larry Seltzer has worked in and written about the computer industry since 1983.

For insights on security coverage around the Web, take a look at eWEEK.com Security Center Editor Larry Seltzer's blog Cheap Hack.



 
 
>>> More IT Security & Network Security News & Reviews Articles          >>> More By Larry Seltzer
 

FEATURED SPONSOR MESSAGE

Microsoft Sponsored Resource Center

Increase Your Microsoft Office 365 Knowledge! Dig inside this suite of cloud-based collaboration tools.

Watch the video >>

Brought to you by





Advertisement
eWEEK Quick LInks

 
Close this advertisement