[ispcp] Port 25 Management

["Jaime Wagner - CGI" <jaime@xxxxxx>]

Follows the description of an effort among ISPs and CPs in Brazil to foster
Internet security. Other countries have already done that. 

 

I think that we could mention also that a faster pace of DNSSEC adoption
would increase security, DNS wise. But Internet security is a much broader
issue that requires coordinated efforts in many areas and by different
actors, many beyond the scope of ICANN.

 

Brazilian ISPs and connectivity operators are working together in
implementing port 25 management. The adoption will be gradual and a schedule
is being accompanied by a working group coordinated by CGI.br, which
comprises telecommunications operators, Anatel, ISPs and associations
representing these sectors.

 

What is port 25 management?
Is the set of actions to separate submission of e-mails by one user from the
transport of messages between email servers.

 

How is this separation of functions done?
The submission of e-mails, done via mailer software such as Thunderbird and
Outlook, shall be made by a unique port for this purpose: the 587/TCP with
authentication. But the transport is still done via 25/TCP.

 

How this prevents spam?
When users adopt port 587/TCP, the operator (ADSL, cable, 3G, etc.) will be
able to filter traffic directed to port 25/TCP. Thus, legitimate mails,
which use port 587, are not affected. But the spam that is sent by infected
machines (botnets) directly to e-mail servers (port 25), will be blocked and
will not leave the network.

 

A spammer cannot send emails via port 587/TCP?
Yes, but the transmission has to be authenticated, making it traceable and
allows the application of other preventive measures by the e-mail service
provider.

 

But if there are spam filters, what are the advantages of this action?
Prevent spam from leaving the infected machine?s network. This avoids
bandwidth waste and prevents the paying by the spammer?s victim user for
sending spurious messages. The email servers are also less loaded,
increasing the quality of service.

 

 

Jaime Wagner
CGI (Comitê Gestor da Internet no Brasil)
Representante dos Provedores de Acesso e Conteúdo
 <mailto:jaime@xxxxxxxxxxxxxxxxxx> jaime <mailto:jaime@xxxxxx> @cgi.br
(51)8126-0916
j.w@xxxxxxxxxxx