AntiSpam Management for Service Provider in Malaysia

1
Anti-Spam Management for Service Provider in
Malaysia

• Alan Lee
• NTT MSC

2
Background

• Working group of the ISF
• TIME, Maxis, Jaring, NTT MSC
• Need for collaboration among the IASP at National
  level
• To Combat Spam

3
Objectives

• To establish a national anti-spam efforts
• Inter IASP Cooperation
• Resolutions of Spam
• To define common processes
• To present a serious effort and penalties for
  spamming
• Best current practices
• Technical framework for action
• Implement a national anti-spam infrastructure
• Education

4
Current Model

• Different policies
• Inconsistent results
• No cooperation
• No representation
• Spammers playground
• No control to register spam source or de-list

5
Proposed Model

• Local Database
• Use of Whitelist and Backlist
• Information Sharing
• Collaboration
• Useful reports
• Moderated
• National level representation

6
Mail Filtering Algorithm
Accept mail
Y
Incoming mail
Override?
N
Deny mail
Local RBL
Special allow/deny list. Eg. Internal mail servers
7
Service Provider Process
Spam Complaint
Source from either e-mail, newsgroup, portal
8
Listing and De-listing Process
Request for listing
By a ISAP member
9
Effects of Blacklisting

• Mails will be denied delivery by local service
  providers
• Deny spammers from moving to other service
  providers
• Suspension of services
• Trial under Section 233, network abuse

10
Requirements

• Technical
• Web front for posting
• DNS Server for blacklisting propagation
• Whois server for maintaining local contact
• Reporting server
• Processes
• Secure information sharing between ISF members
• Active participation from individual abuse teams
• Moderated by MCMC

11
Concerns

• Online marketing companies might be affected
• Suspending user accounts might not be the best
  interest of the company
• Difficult to track spammer who uses public
  hotspots and cybercafe
• Not all ISF members will agree on policies
  introduced

12
Long Term Objectives

• Close cooperation between ISAP for effective
  resolution to abuse issues
• Provide national level representation in terms of
  contact point for abuse issues
• Law against spam

13
Thank You