| draft-shafranovich-feedback-report-00.txt | draft-shafranovich-feedback-report-01-pre1.txt | |||
|---|---|---|---|---|
| Network Working Group Y. Shafranovich | Network Working Group Y. Shafranovich | |||
| Internet-Draft SolidMatrix Technologies, Inc. | Internet-Draft SolidMatrix Technologies, Inc. | |||
| Expires: September 2, 2005 March 2005 | Expires: November 7, 2005 May 6, 2005 | |||
| An Extensible Format for Email Feedback Reports | An Extensible Format for Email Feedback Reports | |||
| draft-shafranovich-feedback-report-00.txt | draft-shafranovich-feedback-report-01-pre1.txt | |||
| Status of this Memo | Status of this Memo | |||
| This document is an Internet-Draft and is subject to all provisions | This document is an Internet-Draft and is subject to all provisions | |||
| of Section 3 of RFC 3667. By submitting this Internet-Draft, each | of Section 3 of RFC 3667. By submitting this Internet-Draft, each | |||
| author represents that any applicable patent or other IPR claims of | author represents that any applicable patent or other IPR claims of | |||
| which he or she is aware have been or will be disclosed, and any of | which he or she is aware have been or will be disclosed, and any of | |||
| which he or she become aware will be disclosed, in accordance with | which he or she become aware will be disclosed, in accordance with | |||
| RFC 3668. | RFC 3668. | |||
| skipping to change at page 1, line 35 | skipping to change at page 1, line 35 | |||
| and may be updated, replaced, or obsoleted by other documents at any | and may be updated, replaced, or obsoleted by other documents at any | |||
| time. It is inappropriate to use Internet-Drafts as reference | time. It is inappropriate to use Internet-Drafts as reference | |||
| material or to cite them other than as "work in progress." | material or to cite them other than as "work in progress." | |||
| The list of current Internet-Drafts can be accessed at | The list of current Internet-Drafts can be accessed at | |||
| http://www.ietf.org/ietf/1id-abstracts.txt. | http://www.ietf.org/ietf/1id-abstracts.txt. | |||
| The list of Internet-Draft Shadow Directories can be accessed at | The list of Internet-Draft Shadow Directories can be accessed at | |||
| http://www.ietf.org/shadow.html. | http://www.ietf.org/shadow.html. | |||
| This Internet-Draft will expire on September 2, 2005. | This Internet-Draft will expire on November 7, 2005. | |||
| Copyright Notice | Copyright Notice | |||
| Copyright (C) The Internet Society (2005). | Copyright (C) The Internet Society (2005). | |||
| Abstract | Abstract | |||
| This document defines an extensible format and MIME type that may be | This document defines an extensible format and MIME type that may be | |||
| used by network operators to report feedback about received email to | used by network operators to report feedback about received email to | |||
| other parties. This format is intended as a machine readable | other parties. This format is intended as a machine readable | |||
| replacement for various existing report formats currently used in | replacement for various existing report formats currently used in | |||
| Internet email. | Internet email. | |||
| Table of Contents | Table of Contents | |||
| 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 3 | 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 3 | |||
| 2. Intent . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 | 2. Intent . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 | |||
| 3. Requirements . . . . . . . . . . . . . . . . . . . . . . . . 3 | 3. Requirements . . . . . . . . . . . . . . . . . . . . . . . . 4 | |||
| 4. Format of Email Feedback Reports . . . . . . . . . . . . . . 4 | 4. Format of Email Feedback Reports . . . . . . . . . . . . . . 4 | |||
| 5. Format of 'message/feedback-report' Content Type . . . . . . 4 | 5. Format of 'message/feedback-report' Content Type . . . . . . 5 | |||
| 6. MIME Type Registration of message/feedback-report . . . . . 5 | 5.1 Required Fields . . . . . . . . . . . . . . . . . . . . . 5 | |||
| 7. IANA Considerations . . . . . . . . . . . . . . . . . . . . 6 | 5.2 Optional Fields Appearing Once . . . . . . . . . . . . . . 5 | |||
| 8. Security Considerations . . . . . . . . . . . . . . . . . . 6 | 5.3 Optional Fields Appearing Multiple Times . . . . . . . . . 6 | |||
| 9. Acknowledgments . . . . . . . . . . . . . . . . . . . . . . 6 | 6. MIME Type Registration of message/feedback-report . . . . . 6 | |||
| 10. References . . . . . . . . . . . . . . . . . . . . . . . . . 7 | 7. Extensibility . . . . . . . . . . . . . . . . . . . . . . . 7 | |||
| 10.1 Normative References . . . . . . . . . . . . . . . . . . 7 | 8. IANA Considerations . . . . . . . . . . . . . . . . . . . . 8 | |||
| 10.2 Informative References . . . . . . . . . . . . . . . . . 7 | 8.1 Initial Values for the Header Names Registry . . . . . . . 9 | |||
| Author's Address . . . . . . . . . . . . . . . . . . . . . . 7 | 8.2 Initial values for the "Feedback-Type" registry . . . . . 10 | |||
| A. Appendix A - An Sample Abuse Report . . . . . . . . . . . . 8 | 9. Security Considerations . . . . . . . . . . . . . . . . . . 10 | |||
| B. Status of This Document [To Be Removed Upon Publication] . . 9 | 10. Acknowledgments . . . . . . . . . . . . . . . . . . . . . . 10 | |||
| B.1 Discussion Venue . . . . . . . . . . . . . . . . . . . . . 9 | 11. References . . . . . . . . . . . . . . . . . . . . . . . . . 11 | |||
| B.2 Document Repository . . . . . . . . . . . . . . . . . . . 9 | 11.1 Normative References . . . . . . . . . . . . . . . . . . 11 | |||
| B.3 Document History . . . . . . . . . . . . . . . . . . . . . 9 | 11.2 Informative References . . . . . . . . . . . . . . . . . 11 | |||
| Intellectual Property and Copyright Statements . . . . . . . 10 | Author's Address . . . . . . . . . . . . . . . . . . . . . . 12 | |||
| A. Appendix A - An Sample Abuse Report . . . . . . . . . . . . 12 | ||||
| B. Status of This Document [To Be Removed Upon Publication] . . 13 | ||||
| B.1 Discussion Venue . . . . . . . . . . . . . . . . . . . . . 13 | ||||
| B.2 Document Repository and Public Website . . . . . . . . . . 13 | ||||
| B.3 Document History . . . . . . . . . . . . . . . . . . . . . 13 | ||||
| Intellectual Property and Copyright Statements . . . . . . . 15 | ||||
| 1. Introduction | 1. Introduction | |||
| As the spam problem has grown in the past few years, network | As the spam problem has grown in the past few years, network | |||
| operators have begun to exchange abuse reports among themselves and | operators have begun to exchange abuse reports among themselves and | |||
| other parties to combat this problem. However, different operators | other parties to combat this problem. However, different operators | |||
| define their own formats and the receivers are forced to write custom | define their own formats and the receivers are forced to write custom | |||
| software to interpret the many types of them. In addition, many | software to interpret the many types of them. In addition, many | |||
| operators use various other report formats to provide non-abuse | operators use various other report formats to provide non-abuse | |||
| feedback about processed email. This memo seeks to define a standard | feedback about processed email. This memo seeks to define a standard | |||
| extensible format and the "message/feedback-report" MIME type for | extensible format and the "message/feedback-report" MIME type for | |||
| these reports in accordance with RFC 2048 [4]. This format and | these reports in accordance with RFC 2048 [11]. This format and | |||
| content type is intended to be used within the scope of the framework | content type is intended to be used within the scope of the framework | |||
| of the "multipart/report" content type defined in RFC 3462 [1]. | of the "multipart/report" content type defined in RFC 3462 [1]. | |||
| This document only defines the format and content type to be used for | This document only defines the format and content type to be used for | |||
| these reports. Determination of where these reports should be sent | these reports. Determination of where these reports should be sent, | |||
| is outside the scope of this document. | how trust among report senders and receivers is established, and | |||
| reports related to more than one message are outside the scope of | ||||
| this document. | ||||
| The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", | ||||
| "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this | ||||
| document are to be interpreted as described in [RFC2119]. | ||||
| NOTE: This document may be incomplete and is intented to evolve based | NOTE: This document may be incomplete and is intented to evolve based | |||
| on public discussion and feedback | on public discussion and feedback. Readers are encourages to submit | |||
| their comments and suggestions. | ||||
| 2. Intent | 2. Intent | |||
| The reports defined in this document are intended for several | The reports defined in this document are intended for several | |||
| purposes: | purposes: | |||
| a. To inform ISPs about email abuse originating from their networks | o To inform ISPs about email abuse and viruses originating from or | |||
| related to their networks | ||||
| b. To provide feedback to email service providers about abuse | o To provide feedback about abuse complaints to email service | |||
| complaints | providers and relevant third parties (such as reputation | |||
| providers) | ||||
| c. To inform the author of the message that the receiver wants to | o To inform email service provides about opt-out requests | |||
| opt out. | ||||
| Note that the reports defined in this document are limited to | Please note that while the parent "multipart/report" content type | |||
| providing feedback about email only. | defined in RFC 3462 [1] is used for all kinds of administrative | |||
| messages, this format is intended specifically for communications | ||||
| among providers regarding email abuse and related issues, and SHOULD | ||||
| NOT be used for other reports. | ||||
| 3. Requirements | 3. Requirements | |||
| The following requirements are necessary for feedback reports : | The following requirements are necessary for feedback reports (the | |||
| actual standard is defined in the next sections) : | ||||
| a. They must be both human and machine readable | o They must be both human and machine readable | |||
| b. Copy of the original email message or email headers must be | o A copy of the original email message (body and headers) or the | |||
| enclosed in order to allow the receiver to properly handle the | message headers must be enclosed in order to allow the receiver to | |||
| report. | properly handle the report. | |||
| o The machine readable section must provide ability for report | ||||
| generators to share metadata with receivers, | ||||
| o The format must be extensible. | ||||
| 4. Format of Email Feedback Reports | 4. Format of Email Feedback Reports | |||
| An email feedback report is a MIME message with a top level MIME | To satisfy the requirements, an email feedback report is defined as a | |||
| content type of "multipart/report" (as defined in RFC 3462 [1]). The | MIME message with a top level MIME content type of "multipart/report" | |||
| following apply: | (as defined in RFC 3462 [1]). The following apply: | |||
| a. The "report-type" parameter of "multipart/report" type is set to | a. The "report-type" parameter of "multipart/report" type is set to | |||
| "feedback-report". | "feedback-report" | |||
| b. The first MIME part of the message contains a human readable | b. The first MIME part of the message contains a human readable | |||
| description of the report | description of the report and MUST be included. | |||
| c. The second MIME part of the message contains a machine readable | c. The second MIME part of the message is a machine-readable section | |||
| abuse report with the content type of "message/feedback-report" | with the content type of "message/feedback-report" (defined later | |||
| (defined later on in this document). | on in this document) and MUST be included. This section is | |||
| intended to convey metadata about the report in question that may | ||||
| not be readily available from the included email message itself. | ||||
| d. The third MIME part of the message contains either a full copy of | d. The third MIME part of the message contains either a full copy of | |||
| the original message with a MIME content type of "message/rfc822" | the original message with a MIME content type of "message/rfc822" | |||
| (as defined in RFC 2046 [1]) OR a copy of the headers from the | (as defined in RFC 2046 [2]) OR a copy of the headers from the | |||
| original message with MIME content type of "text/rfc822-headers" | original message with MIME content type of "text/rfc822-headers" | |||
| (as defined in RFC 3462 [1]). | (as defined in RFC 3462 [1]). This part MUST BE included (unlike | |||
| RFC 3462 [1]). | ||||
| e. Each abuse report should related to a single originating message. | ||||
| f. The subject line of the abuse report should read as "Email | e. Each feedback report MUST be related to only a SINGLE email | |||
| Feedback Report for IP X.X.X.X" where "X.X.X.X" is the source IP | message. Summary and aggregate formats are outside the scope of | |||
| of the MTA from which the original message was received. If | this specification. | |||
| email authentication is used, the sender may substitute the text | ||||
| "for domain YYYYY.ZZZZ" where "YYYYY.ZZZZ" is the authenticated | ||||
| domain. | ||||
| g. It is preferable that all original email headers are included | f. The subject line of the feedback report SHOULD be the same as the | |||
| even though they are defined as optional in RFC 3462 [1]. | included email message and MAY include only the standard | |||
| forwarding prefix used by MUAs such as "FW:" (many smaller | ||||
| operators using MUAs for abuse handling rely on the subject lines | ||||
| for processing). | ||||
| 5. Format of 'message/feedback-report' Content Type | 5. Format of 'message/feedback-report' Content Type | |||
| The message/feedback-report content type consists of several header | This content type provides a machine-readable section intended to let | |||
| fields as follows: | the report generator convey metadata to the report receiver. The | |||
| intent of this section is it allow report generators to convey | ||||
| metadata to report receivers that may not available or may not be | ||||
| readily available from the originating email message or headers. | ||||
| a. "Source-IP:" - contains an IPv4 or IPv6 address of the MTA from | The body of this content type consists of multiple "fields" formatted | |||
| which the original message was received. | according to the ABNF of RFC 822 [12] header "fields". This section | |||
| defines the initial set of fields provided by this specification. | ||||
| Additional fields maybe registered according to the procedure | ||||
| described later on in this document. Note that these fields | ||||
| represent information that the receiver is asserting about the report | ||||
| in question, but are not necessarily verifiable. Report receivers | ||||
| MUST NOT assume that these assertions are always true. | ||||
| b. "Received-Date:" - date the original message was received. This | 5.1 Required Fields | |||
| field is formatted in according to the definition in section 3.3 | ||||
| of RFC 2822 [2] | ||||
| c. "Original-Message-ID:" - contains the RFC 2822 [2] Message-ID of | ||||
| the original message | ||||
| d. "Feedback-Type:" - contains the type of feedback as defined in | The following header fields are REQUIRED and MUST only appear once: | |||
| the corresponding IANA registry. | ||||
| e. "Authenticated-Domain:" and "Authenticated-Domain-Method:" - | o "Feedback-Type:" - contains the type of feedback report (as | |||
| defines the authenticated domain and method used for perform that | defined in the corresponding IANA registry). This is intended to | |||
| authentication. The list of method tokens is contained in the | let report generators distinguish among different types of | |||
| corresponding IANA registry. Note that the actual type of | reports. | |||
| authentication used is outside the scope of this document. | ||||
| o "User-Agent:" - indicates the name and version of the software | ||||
| program that generated the report. The format of this field MUST | ||||
| follow section 14.43 of RFC 2616 [3]. | ||||
| o "Version" - indicates the version of specification that the report | ||||
| generator is using to generate the report. The version number in | ||||
| this specification is set to "0.1". | ||||
| 5.2 Optional Fields Appearing Once | ||||
| The following header fields are OPTIONAL and MUST NOT appear more | ||||
| than once: | ||||
| o "Original-Mail-From:" - copy of the email address used in the MAIL | ||||
| FROM portion of the original SMTP transaction. The format of this | ||||
| field is defined in section 4.1.1.2 of RFC 2821 [4]. | ||||
| o "Original-Rcpt-To:" - copy of the email address used in the RCPT | ||||
| TO portion of the original SMTP transaction. The format of this | ||||
| field is defined in section 4.1.1.3 of RFC 2821 [4]. | ||||
| o "Received-Date:" - indicates the date the original message was | ||||
| received by the report generator. This field MUST BE formatted as | ||||
| per section 3.3 of RFC 2822 [5]. | ||||
| o "Source-IP:" - contains an IPv4 or IPv6 address of the MTA from | ||||
| which the original message was received. IPv4 addresses are to be | ||||
| formatted in dot-decimal notation as currently used by the | ||||
| community. IPv6 addresses MUST BE formatted as per section 2.2 of | ||||
| RFC 2373 [6]. | ||||
| 5.3 Optional Fields Appearing Multiple Times | ||||
| The following set of header fields are OPTIONAL and MAY appear more | ||||
| than once: | ||||
| o "Authentication-Results:" - indicates the result of an | ||||
| authentication check run by the report generator. The format of | ||||
| this field is is defined in draft-kucherawy-sender-auth-header | ||||
| [7]. Report receivers should note that this field only indicates | ||||
| an assertion made by the report generator. | ||||
| o "Reported-Domain:" - indicates a domain name that the report | ||||
| generator believes to be relevant to the report. Domain format is | ||||
| defined in section 2.3.1 of RFC 1035 [8]. | ||||
| o "Reported-URI:" - indicates a URI that the report generator | ||||
| believes to be relevant to the report. URI format is defined in | ||||
| RFC 2396 [13]. | ||||
| o "Removal-Recipient:" - indicates the email address to be removed | ||||
| from the mailing list (only used with "opt-out" feedback report). | ||||
| The format of this field is defined in section 3.4.1 of RFC 2822 | ||||
| [5]. | ||||
| 6. MIME Type Registration of message/feedback-report | 6. MIME Type Registration of message/feedback-report | |||
| This section provides the media type registration application (as per | This section provides the media type registration application (as per | |||
| RFC 2048 [4], which will be submitted to IANA after IESG approval of | RFC 2048 [11], which will be submitted to IANA after IESG approval of | |||
| this document. | this document. | |||
| To: ietf-types@iana.org | To: ietf-types@iana.org | |||
| Subject: Registration of MIME media types message/feedback-report | Subject: Registration of MIME media types message/feedback-report | |||
| MIME media type name: message | MIME media type name: message | |||
| MIME subtype name: feedback-report | MIME subtype name: feedback-report | |||
| Required parameters: none | Required parameters: none | |||
| Optional parameters: none | Optional parameters: none | |||
| skipping to change at page 5, line 41 | skipping to change at page 7, line 21 | |||
| Optional parameters: none | Optional parameters: none | |||
| Encoding considerations: | Encoding considerations: | |||
| "7bit" encoding is sufficient and MUST be used to maintain | "7bit" encoding is sufficient and MUST be used to maintain | |||
| readability when viewed by non-MIME mail readers. | readability when viewed by non-MIME mail readers. | |||
| Security considerations: | Security considerations: | |||
| See section 3 of RFC 3462 [1] | See the "Security Considerations" of this document. | |||
| Interoperability considerations: none | Interoperability considerations: implementors MUST ignore any fields | |||
| they do not support | ||||
| Published specification: this document | Published specification: this document | |||
| Applications which use this media type: Abuse helpdesk software for | Applications which use this media type: Abuse helpdesk software for | |||
| ISPs | ISPs | |||
| Additional information: | Additional information: | |||
| Magic number(s): none | Magic number(s): none | |||
| skipping to change at page 6, line 19 | skipping to change at page 7, line 47 | |||
| Macintosh File Type Code(s): none | Macintosh File Type Code(s): none | |||
| Person and email address to contact for further information: | Person and email address to contact for further information: | |||
| Yakov Shafranovich <ietf@shaftek.org> | Yakov Shafranovich <ietf@shaftek.org> | |||
| Intended usage: COMMON | Intended usage: COMMON | |||
| Author/Change controller: IESG | Author/Change controller: IESG | |||
| 7. IANA Considerations | 7. Extensibility | |||
| Like many other formats and protocols, this format may need to be | ||||
| extended overtime to fit the ever changing landscape of the Internet. | ||||
| Therefore, extensibility is being provided via two IANA registries: | ||||
| one for feedback types and a second for header fields. The feedback | ||||
| type registry is to be used in conjunction with the "Feedback-Type" | ||||
| field above. The header name registry is intended for registration | ||||
| of new metadata fields to be used in the machine readable portion | ||||
| (part 2) of this format. Please note that version numbers do not | ||||
| change with new field registrations unless a new specification of | ||||
| this format is published. Also note that all new field registrations | ||||
| can only registered OPTIONAL fields. Any new required fields REQUIRE | ||||
| a new version of this specification to be published. | ||||
| In order to encourage extensibility and interoperability of this | ||||
| format, implementors SHOULD ignore any fields they do not support. | ||||
| 8. IANA Considerations | ||||
| After IESG approval, IANA is expected to register MIME type "message/ | After IESG approval, IANA is expected to register MIME type "message/ | |||
| feedback-report" using the application provided in this document and | feedback-report" using the application provided in this document and | |||
| setup two registries for "Feedback-Type" and "Authentication-Domain- | setup two registries: one for header field names and a second for | |||
| Method" headers. Below are the initial values for these registries. | "Feedback-Type" values. This section contains the templates used for | |||
| registration of new entries in these registries and initial values. | ||||
| New registrations to these two registries MUST have approval by an | ||||
| Designated Expert in accordance with the Expert Review guidelines as | ||||
| described in RFC 2434 [9]. Any new field registered is considered | ||||
| OPTIONAL unless a new version of this specifiction is published. | ||||
| Initial values for the "Feedback-Type" registry: | For the header name registry, the following MUST be provided in an | |||
| RFC publication (or Internet draft with IETF consensus or IESG | ||||
| approval) in order to register a new header field name: | ||||
| abuse - spam or some other kind of email abuse | 1. Name of the field being registered | |||
| opt-out - a request to opt out from a mailing list. | 2. Short description of the field | |||
| virus - report of a virus found in the originating message | 3. Whether the field can appear more than once | |||
| Initial values for the "Authentication-Domain-Method" registry: | 4. Which "Feedback-Type" types does this field apply to (or "any") | |||
| domainkeys - as defined in delany-domainkeys-base [5] | 5. The RFC number (or Internet draft name) in which this header is | |||
| registered | ||||
| iim - as defined in fenton-identified-mail [6] | If the header field being registered requires its own IANA registry, | |||
| than the appropriate registry MUST be properly defined. | ||||
| sender-id - as defined in lyon-senderid-core [7] | For the feedback type registry, the following MUST be provided in an | |||
| RFC publication (or Internet draft with IETF consensus or IESG | ||||
| approval) in order to register a new header field name: | ||||
| spf - as defined in schlitt-spf-classic [8] | 1. Name of the feedback type being registered | |||
| 8. Security Considerations | 2. Short description | |||
| 3. The RFC number (or Internet draft name) in which this feedback | ||||
| type is registered | ||||
| 8.1 Initial Values for the Header Names Registry | ||||
| The data below is populated from this document. The RFC number used | ||||
| for registration of these values is this document. | ||||
| Field Name: Authentication-Results | ||||
| Description: results of authentication check | ||||
| Multiple Appearances: Yes | ||||
| Related "Feedback-Type": any | ||||
| Field Name: Feedback-Type | ||||
| Description: type of feedback report | ||||
| Multiple Appearances: No | ||||
| Related "Feedback-Type": N/A | ||||
| Field Name: Original-Mail-From | ||||
| Description: email address used in the MAIL FROM portion of the | ||||
| original SMTP transaction | ||||
| Multiple Appearances: No | ||||
| Related "Feedback-Type": any | ||||
| Field Name: Original-Rcpt-To | ||||
| Description: copy of the email address used in the RCPT TO portion of | ||||
| the original SMTP transaction | ||||
| Multiple Appearances: No | ||||
| Related "Feedback-Type": any | ||||
| Field Name: Received-Date | ||||
| Description: date the original message was received | ||||
| Multiple Appearances: No | ||||
| Related "Feedback-Type": any | ||||
| Field Name: Reported-Domain | ||||
| Description: relevant domain name | ||||
| Multiple Appearances: Yes | ||||
| Related "Feedback-Type": any | ||||
| Field Name: Reported-URI | ||||
| Description: relevant URI | ||||
| Multiple Appearances: Yes | ||||
| Related "Feedback-Type": any | ||||
| Field Name: Removal-Recipient | ||||
| Description: email address to be removed from the mailing list | ||||
| Multiple Appearances: Yes | ||||
| Related "Feedback-Type": opt-out | ||||
| Field Name: Source-IP | ||||
| Description: IPv4 or IPv6 address from which the original message was | ||||
| received | ||||
| Multiple Appearances: No | ||||
| Related "Feedback-Type": any | ||||
| Field Name: User-Agent | ||||
| Description: name and version of the program used | ||||
| Multiple Appearances: No | ||||
| Related "Feedback-Type": any | ||||
| Field Name: Version | ||||
| Description: version of specification used | ||||
| Multiple Appearances: No | ||||
| Related "Feedback-Type": any | ||||
| 8.2 Initial values for the "Feedback-Type" registry | ||||
| The initial names and descriptions are provided below. The RFC | ||||
| number used for registration of these values is this document. | ||||
| o abuse - spam or some other kind of email abuse | ||||
| o opt-out - a request to opt out from a mailing list. | ||||
| o virus - report of a virus found in the originating message | ||||
| 9. Security Considerations | ||||
| See section 3 of RFC 3462 [1] | See section 3 of RFC 3462 [1] | |||
| 9. Acknowledgments | 10. Acknowledgments | |||
| The author would like to thank many of the members of the email | The author would like to thank many of the members of the email | |||
| community who provided helpful comments and suggestions for this | community who provided helpful comments and suggestions for this | |||
| document including many of the participants in ASRG, IETF and MAAWG | document including many of the participants in ASRG, IETF and MAAWG | |||
| activities. | activities. | |||
| 10. References | 11. References | |||
| 10.1 Normative References | 11.1 Normative References | |||
| [1] Vaudreuil, G., "The Multipart/Report Content Type for the | [1] Vaudreuil, G., "The Multipart/Report Content Type for the | |||
| Reporting of Mail System Administrative Messages", RFC 3462, | Reporting of Mail System Administrative Messages", RFC 3462, | |||
| January 2003. | January 2003. | |||
| [2] Resnick, P., "Internet Message Format", RFC 2822, April 2001. | [2] Freed, N. and N. Borenstein, "Multipurpose Internet Mail | |||
| [3] Freed, N. and N. Borenstein, "Multipurpose Internet Mail | ||||
| Extensions (MIME) Part Two: Media Types", RFC 2046, | Extensions (MIME) Part Two: Media Types", RFC 2046, | |||
| November 1996. | November 1996. | |||
| 10.2 Informative References | [3] Fielding, R., Gettys, J., Mogul, J., Frystyk, H., Masinter, L., | |||
| Leach, P., and T. Berners-Lee, "Hypertext Transfer Protocol -- | ||||
| HTTP/1.1", RFC 2616, June 1999. | ||||
| [4] Freed, N., Klensin, J., and J. Postel, "Multipurpose Internet | [4] Klensin, J., "Simple Mail Transfer Protocol", RFC 2821, | |||
| Mail Extensions (MIME) Part Four: Registration Procedures", | April 2001. | |||
| BCP 13, RFC 2048, November 1996. | ||||
| [5] Delany, M., "Domain-based Email Authentication Using Public-Keys | [5] Resnick, P., "Internet Message Format", RFC 2822, April 2001. | |||
| Advertised in the DNS (DomainKeys)", | ||||
| draft-delany-domainkeys-base-02 (work in progress), March 2005. | ||||
| [6] Fenton, J. and M. Thomas, "Identified Internet Mail", | [6] Hinden, R. and S. Deering, "IP Version 6 Addressing | |||
| draft-fenton-identified-mail-01 (work in progress), | Architecture", RFC 2373, July 1998. | |||
| October 2004. | ||||
| [7] Lyon, J., "Sender ID: Authenticating E-Mail", | [7] Kucherawy, M., "Message Header for Indicating Sender | |||
| draft-lyon-senderid-core-00 (work in progress), November 2004. | Authentication Status", draft-kucherawy-sender-auth-header-02 | |||
| (work in progress), May 2005. | ||||
| [8] Wong, M., "Sender Policy Framework: Authorizing Use of Domains | [8] Mockapetris, P., "Domain names - implementation and | |||
| in E-MAIL", draft-schlitt-spf-classic-00 (work in progress), | specification", STD 13, RFC 1035, November 1987. | |||
| January 2005. | ||||
| [9] Narten, T. and H. Alvestrand, "Guidelines for Writing an IANA | ||||
| Considerations Section in RFCs", BCP 26, RFC 2434, | ||||
| October 1998. | ||||
| [10] Bradner, S., "Key words for use in RFCs to Indicate Requirement | ||||
| Levels", BCP 14, RFC 2119, March 1997. | ||||
| 11.2 Informative References | ||||
| [11] Freed, N., Klensin, J., and J. Postel, "Multipurpose Internet | ||||
| Mail Extensions (MIME) Part Four: Registration Procedures", | ||||
| BCP 13, RFC 2048, November 1996. | ||||
| [12] Crocker, D., "Standard for the format of ARPA Internet text | ||||
| messages", STD 11, RFC 822, August 1982. | ||||
| [13] Berners-Lee, T., Fielding, R., and L. Masinter, "Uniform | ||||
| Resource Identifiers (URI): Generic Syntax", RFC 2396, | ||||
| August 1998. | ||||
| Author's Address | Author's Address | |||
| Yakov Shafranovich | Yakov Shafranovich | |||
| SolidMatrix Technologies, Inc. | SolidMatrix Technologies, Inc. | |||
| Email: ietf@shaftek.org | Email: ietf@shaftek.org | |||
| URI: http://www.shaftek.org | URI: http://www.shaftek.org | |||
| Appendix A. Appendix A - An Sample Abuse Report | Appendix A. Appendix A - An Sample Abuse Report | |||
| From: <abusedesk@example.com> | From: <abusedesk@example.com> | |||
| Date: Thu, 8 Mar 2005 17:40:36 EDT | Date: Thu, 8 Mar 2005 17:40:36 EDT | |||
| Subject: Email Abuse Report for IP 10.67.41.167 | Subject: FW: Earn money | |||
| To: <abuse@example.net> | To: <abuse@example.net> | |||
| MIME-Version: 1.0 | MIME-Version: 1.0 | |||
| Content-Type: multipart/report; report-type=feedback-report; boundary="part1_13d.2e68ed54_boundary" | Content-Type: multipart/report; report-type=feedback-report; boundary="part1_13d.2e68ed54_boundary" | |||
| --part1_13d.2e68ed54_boundary | --part1_13d.2e68ed54_boundary | |||
| Content-Type: text/plain; charset="US-ASCII" | Content-Type: text/plain; charset="US-ASCII" | |||
| Content-Transfer-Encoding: 7bit | Content-Transfer-Encoding: 7bit | |||
| This is an email abuse report for an email message received from IP 10.67.41.167 on Thu, 8 Mar 2005 14:00:00 EDT. | This is an email abuse report for an email message received from IP 10.67.41.167 on Thu, 8 Mar 2005 14:00:00 EDT. | |||
| --part1_13d.2e68ed54_boundary | --part1_13d.2e68ed54_boundary | |||
| Content-Type: message/feedback-report | Content-Type: message/feedback-report | |||
| Source-IP: 10.67.41.167 | ||||
| Received-Date: Thu, 8 Mar 2005 14:00:00 EDT | ||||
| Original-Message-ID: 8787KJKJ3K4J3K4J3K4J3.mail@example.net | ||||
| Feedback-Type: abuse | Feedback-Type: abuse | |||
| User-Agent: SomeGenerator/1.0 | ||||
| Version: 0.1 | ||||
| Original-Mail-From: <somespammer@example.net> | ||||
| Original-Rcpt-To: <user@example.com> | ||||
| Received-Date: Thu, 8 Mar 2005 14:00:00 EDT | ||||
| Source-IP: 10.67.41.167 | ||||
| Authentication-Results: mail.example.com | ||||
| smtp.mail=somespammer@example.com; | ||||
| spf=fail | ||||
| Reported-Domain: example.net | ||||
| Reported-Uri: http://example.net/earn_money.html | ||||
| Reported-Uri: mailto:user@example.com | ||||
| Removal-Recipient: user@example.com | ||||
| --part1_13d.2e68ed54_boundary | --part1_13d.2e68ed54_boundary | |||
| Content-Type: message/rfc822 | Content-Type: message/rfc822 | |||
| Content-Disposition: inline | Content-Disposition: inline | |||
| From: <somespammer@example.net> | From: <somespammer@example.net> | |||
| Received: from mailserver.example.net (mailserver.example.net [10.67.41.167]) | Received: from mailserver.example.net (mailserver.example.net [10.67.41.167]) | |||
| by example.com with ESMTP id M63d4137594e46; Thu, 08 Mar 2005 14:00:00 -0400 | by example.com with ESMTP id M63d4137594e46; Thu, 08 Mar 2005 14:00:00 -0400 | |||
| To: <Undisclosed Recipients> | To: <Undisclosed Recipients> | |||
| Subject: Earn money | Subject: Earn money | |||
| skipping to change at page 9, line 9 | skipping to change at page 13, line 23 | |||
| Spam Spam Spam | Spam Spam Spam | |||
| Spam Spam Spam | Spam Spam Spam | |||
| Spam Spam Spam | Spam Spam Spam | |||
| Spam Spam Spam | Spam Spam Spam | |||
| --part1_13d.2e68ed54_boundary-- | --part1_13d.2e68ed54_boundary-- | |||
| Appendix B. Status of This Document [To Be Removed Upon Publication] | Appendix B. Status of This Document [To Be Removed Upon Publication] | |||
| B.1 Discussion Venue | B.1 Discussion Venue | |||
| Comments about this document should be sent directly to the author at | Discussion about this document should be directed to the ABUSE- | |||
| via <ietf@shaftek.org>. | FEEDBACK-REPORT mailing list | |||
| <http://mipassoc.org/mailman/listinfo/abuse-feedback-report> which is | ||||
| also reachable via <mailto:abuse-feedback-report@mipassoc.org>. Of | ||||
| course, comments directly to the author are always welcome (you can | ||||
| send them via email to <ietf@shaftek.org>). | ||||
| B.2 Document Repository | B.2 Document Repository and Public Website | |||
| Copies of this and earlier versions including multiple formats can be | Copies of this and earlier versions including multiple formats can be | |||
| found at <http://www.shaftek.org/publications/drafts/abuse-report/>. | found at <http://www.shaftek.org/publications/drafts/abuse-report/>. | |||
| A public website regarding this draft and related efforts is located | ||||
| at <http://mipassoc.org/arf/>. | ||||
| B.3 Document History | B.3 Document History | |||
| Changes from draft-shafranovich-feedback-report-00 to | ||||
| draft-shafranovich-feedback-report-01-pre1: | ||||
| o Changed the introduction section< to clarify specific points that | ||||
| are out of scope for this document | ||||
| o Added pointers to a public mailing list for discussion and public | ||||
| web page | ||||
| o Clarified the intent section and added some extra points to it | ||||
| o Added a reference to RFC 2119 and changed the document to comply | ||||
| o Made it clear that the requirements section) is not the one | ||||
| defining the standard | ||||
| o Clarified the main format section to make all three parts | ||||
| mandatory | ||||
| o Changed section 4f regarding subject lines to mandate that subject | ||||
| lines should be left intact. Removed the convention for subject | ||||
| lines that was defined in the previous version | ||||
| o Added text to the the machine readable section clarifying its | ||||
| intent. Also added RFC 2119 references, reorganized fields, | ||||
| indicated whether specific header fields can appear more than once | ||||
| and provided references as to how they should be formatted. | ||||
| o Removed "Original-Message-ID", "Authenticated-Domain:" and | ||||
| "Authenticated-Domain-Method" from the draft including related | ||||
| IANA registries. Added "Version", "User-Agent", Original-Mail- | ||||
| From", "Original-Rcpt-To", "Reported-Uri", "Reported-Domain" and | ||||
| "Authentication-Results". | ||||
| o Example has been updated to reflect new headers. | ||||
| o Added a new section on extensibility and changed the IANA section | ||||
| to reflect that. | ||||
| Changes from draft-shafranovich-abuse-report-00 to | Changes from draft-shafranovich-abuse-report-00 to | |||
| draft-shafranovich-feedback-report-00: | draft-shafranovich-feedback-report-00: | |||
| o Name of the format and report changed to 'feedback-report' | o Name of the format and report changed to 'feedback-report' | |||
| o Minor spelling corrections | o Minor spelling corrections | |||
| o Added authentication headers and registry | o Added authentication headers and registry | |||
| End of changes. | ||||
This html diff was produced by rfcdiff 1.23, available from http://www.levkowetz.com/ietf/tools/rfcdiff/ | ||||