Abrahosting (Brazilian Association of Internet Hosting Infrastructure Companies) is completing the project of a collaborative "blacklist", uniting the largest hosting providers inside and outside their base in Brazil. The objective is to considerably reduce the spam rate in email traffic and promote savings of millions of reais for the hosting sector.
Together, Abrahosting associates are responsible for supporting around 60% of Internet traffic in Brazil and are among the main operational victims of the large spam traffic, today representing 97% of messages that reach the edges of local providers.
The collaborative blacklist is a unified registry of senders and email domains that are classified as "non-secure" by the cyber control systems of each provider involved, creating a unified online base of reputation from these origins to optimize the efficiency of email policies. block.
According to Gustavo Morgado, director of operations at Abrahosting, Brazilian providers currently work with their own, non-shared blacklists, which creates conflicts between them in the evaluation of the origin of messages, making Spam control policies difficult.
According to Morgado, another common practice is the complementary use of international lists, as is the case of the Spamcorp and Spanhaus initiatives, which do not allow multiple types of verification, as they are limited to blocking IP addresses.
Reputation will match different parameters
The new reputation system will be based on a multi-check cloud solution, with the ability to individualize the reputation of each insecure sender. A feature that applies even when this user is using a shared IP, employing random sender features, or using multiple origin servers to attempt to mask spam.
Currently, explains Gustavo Morgado, most blacklists use only a single parameter in the evaluation of origin: either they evaluate the quality of the SPF (Senders Framework Policy; in English) or they verify the existence or not of DNS (System of Names). of Domains) legitimate.
"The model we are creating adopts a new type of open source tool in the cloud that evaluates DNS and SPF simultaneously and allows much more refined techniques of blocking definition", comments the director of Abrahosting. Among the solutions already being studied by Abrahosting is the Brazilian system SPFBL, which enables the creation of a P2P communication between providers in order to maintain a dynamic blacklist with multiple parameters.
Among these restriction parameters, Gustavo Morgado lists the blocking of a single IP or IP ranges, sender e-mail, sender domain, e-mail server name, return address ("regex") of sender, ID and CNPJ/CPF registered in Whois do Registro.br, among others.
The Abrahosting system will also evaluate according to content rules involving the subject of the messages, the inclusion or not of links and the use of critical expressions.
According to Vicente Moura Neto, President of Abrahosting, in addition to consuming more than 70% of the providers' traffic reception structure, Spam is a strong factor in overloading the costs of security, service and support services. According to Abrahosting's estimate, just to analyze and unblock a single e-mail, companies spend an average of 20 minutes of man-hour of specialized labor.
The collaborative blacklist will also lead to a unified whitelist. Abrahosting predicts that the connection to the master point could take place later this year.
EN 
PT 
