nanog mailing list archives

Re: spamhaus drop list


From: Peter Dambier <peter () peter-dambier de>
Date: Tue, 16 Jun 2009 21:15:37 +0200

Also I don't like those lists at all

http://www.heise.de/ix/nixspam/dnsbl_en/

Heise do print the very important magazines IX, CT and others in germany.
They depend on their emails coming through.

Kind regards
Peter


Quinn Mahoney wrote:
Is there a competing droplist, that can be compared against Spamhaus's
droplist?  That seems like an extraordinary claim, so I'm not satisfied
with the evidence provided.  Is this not the best droplist?

-----Original Message-----
From: Dean Anderson [mailto:dean () av8 com] 
Sent: Monday, June 15, 2009 6:10 PM
To: Quinn Mahoney
Cc: nanog () nanog org
Subject: Re: spamhaus drop list

I suggest you avoid spamhaus, MAPS, and SORBS. They are really spammers
in disguise, using blacklists to harm their competition while presumably
letting their own spam through. We know they have used trust of the
anti-spam community to list-wash spam-trap addresses.

See http://www.iadl.org/whitehat/whitehat-story.html add the IADL pages
on Paul Vixie and MAPS.

You might also look at 
http://www.av8.net/IETF-watch/People/JohnLevine/index.html
Levine, long head of the Anti-spam Research Group, was also unmasked as
a spammer.

Fred Baker <fred () cisco com> is on the ISC Board of Trustees, and is a 
Vixie supportor.


              --Dean

On Mon, 15 Jun 2009, Quinn Mahoney wrote:

I'm looking to implement the Spamhaus drop list.
http://www.spamhaus.org/drop/index.lasso

 

On their FAQ they have a script that looks like it grabs the lists
text
file and connects to a given router, and tells you what has changed in
the list, and what your router is null routing.  I'm not sure if it
then
removes the null routes if a list entry has been removed.  I haven't
found much documentation on the net regarding this.  In the future it
looks like you will be able to peer with them and null route traffic
from a private AS, which will be routes from the drop list.  Right now
though, it looks like you'd have to update an ACL manually for any
changes to the list.  Or use this script which null routes the traffic
(I guess it's not a big deal getting the syn packets, as long as the
mail won't send because of the null route).  I am not sure if this
script updates the null routes automatically, or how to use it, I
can't
find to much documentation. 

 

Any documentation on this script or another script available.  What
are
your suggestions?

 

thanks

 

 





-- 
Peter and Karin Dambier
Cesidian Root - Radice Cesidiana
Rimbacher Strasse 16
D-69509 Moerlenbach-Bonsweiher
+49(6209)795-816 (Telekom)
+49(6252)750-308 (VoIP: sipgate.de)
mail: peter () peter-dambier de
http://www.peter-dambier.de/
http://iason.site.voila.fr/
https://sourceforge.net/projects/iason/
ULA= fd80:4ce1:c66a::/48


Current thread: