nanog mailing list archives

RE: spamhaus drop list


From: "Quinn Mahoney" <quinn () activehost com>
Date: Tue, 16 Jun 2009 14:00:51 -0400

Is there a competing droplist, that can be compared against Spamhaus's
droplist?  That seems like an extraordinary claim, so I'm not satisfied
with the evidence provided.  Is this not the best droplist?

-----Original Message-----
From: Dean Anderson [mailto:dean () av8 com] 
Sent: Monday, June 15, 2009 6:10 PM
To: Quinn Mahoney
Cc: nanog () nanog org
Subject: Re: spamhaus drop list

I suggest you avoid spamhaus, MAPS, and SORBS. They are really spammers
in disguise, using blacklists to harm their competition while presumably
letting their own spam through. We know they have used trust of the
anti-spam community to list-wash spam-trap addresses.

See http://www.iadl.org/whitehat/whitehat-story.html add the IADL pages
on Paul Vixie and MAPS.

You might also look at 
http://www.av8.net/IETF-watch/People/JohnLevine/index.html
Levine, long head of the Anti-spam Research Group, was also unmasked as
a spammer.

Fred Baker <fred () cisco com> is on the ISC Board of Trustees, and is a 
Vixie supportor.


                --Dean

On Mon, 15 Jun 2009, Quinn Mahoney wrote:

I'm looking to implement the Spamhaus drop list.
http://www.spamhaus.org/drop/index.lasso

 

On their FAQ they have a script that looks like it grabs the lists
text
file and connects to a given router, and tells you what has changed in
the list, and what your router is null routing.  I'm not sure if it
then
removes the null routes if a list entry has been removed.  I haven't
found much documentation on the net regarding this.  In the future it
looks like you will be able to peer with them and null route traffic
from a private AS, which will be routes from the drop list.  Right now
though, it looks like you'd have to update an ACL manually for any
changes to the list.  Or use this script which null routes the traffic
(I guess it's not a big deal getting the syn packets, as long as the
mail won't send because of the null route).  I am not sure if this
script updates the null routes automatically, or how to use it, I
can't
find to much documentation. 

 

Any documentation on this script or another script available.  What
are
your suggestions?

 

thanks

 

 




-- 
Av8 Internet   Prepared to pay a premium for better service?
www.av8.net         faster, more reliable, better service
617 344 9000   







Current thread: