Posted: 08th Mar, 2011 By: MarkJ
Cloudmark, an internet messaging and security solutions provider, has claimed that ISPs, specifically those who fail to properly update their systems and security to cope with the new IPv6 internet addresses, could be leaving themselves open to
growing problems from junk email (SPAM) in the future.
Stuart Paton, Cloudmark's Senior Solutions Architect EMEA, said:
"The Internet is quickly moving to adopt a new technology for the underlying networking used to track nodes on the network and communicate. However, the introduction of the IPv6 scheme could have a far reaching impact on spam security. As an example, the primary method for stopping the majority of spam used by email providers is to track bad IP addresses sending email and block them - a process known as IP Blacklisting.
With IPv6 this technique will no longer be possible and could mean that email systems would quickly become overloaded if new approaches are not developed to address this. This is one example, but there are other examples across the web.
IPv6 has been designed to have a significantly larger number of available IP addresses than IPv4. We are talking 3.4 x 10^38 compared to 4.3 billion (4.3 x 10^9). Fundamentally, this presents serious difficulties in tracking all of the IPs for any purpose-email sender reputation, denial of service, sources used for malicious sign ups to websites, sources of click fraud attacks, influencing of search engine results, and many other scenarios.
As an example, the address space is so large that it would be easy for spammers to use a single IP address just once to send a single email. Based on these new risks with IPv6, Cloudmark advocates that ISPs do not initially need to be able to receive mail from IPv6 addresses (on inbound) except from their own customers (known as outbound). This would ensure business continuity for ISPs and provisioning of ADSL/Cable modems to continue. This measure will also protect the IPv4 reputation system that is currently in use and working well."
We're not sure whether telling ISPs "
not ... to receive mail from IPv6 addresses" is really the best course of action, although clearly there is a potential problem there that providers and related services will need to address. Ultimately SPAM has always been tough to tackle and that was never going to disappear with IPv6, although it would be a tragedy if the weight of junk mail made
email unusable.