[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: spam blocking engine
- To: misc_(_at_)_openbsd_(_dot_)_org
- Subject: Re: spam blocking engine
- From: Abdul Rehman Gani <abdulg_(_at_)_eastcoast_(_dot_)_co_(_dot_)_za>
- Date: Thu, 19 Dec 2002 16:25:21 +0200
- Organization: East Coast Access
On Thursday 19 December 2002 14:29, Richard Welty wrote:
> On Wed, 18 Dec 2002 23:08:11 -0500 Marcus Watts <mdw_(_at_)_umich_(_dot_)_edu> wrote:
> > Getting a good list of open relays is hard. The last time I looked
> > (which was, admittedly, a while ago) I did not find very good
> > correspondence between the sites from which I saw spam being
> > originated, and which sites were blocked in several popular lists.
> relays.visi.com was good, but it's been shut down.
> while i have philosophical objections to the ORBS style active scanning,
> one of the children of ORBS, ORDB, seems to be pretty accurate.
I also use ordb to good effect.
> > How
> > good do you find the data from spews.org to be?
> what i've seen of spews suggests that the initial listings may be of high
> quality, but mr. spews plays escallation games with intentional collateral
> damage affecting folks with adjacent netblocks. whether this is acceptable
> is again a matter of personal philosophy.
I agree - spews incurs way too much collateral damage - we have stopped using
them for this reason.
> my question: would the source for ips to be blocked be something that's
> configurable via a DNSBL parameter in a config file? in this case, there
> could be a reasonable default which could be tweaked to taste, with a list
> of DNSBLs to be queried.
This is possibly the best solution as it will leave the decision of which list
to use in the administrator's hands.