nanog mailing list archives

Re: SORBS?!


From: William Herrin <bill () herrin us>
Date: Fri, 6 Apr 2012 12:56:08 -0400

On Fri, Apr 6, 2012 at 7:31 AM, Drew Weaver <drew.weaver () thenap com> wrote:
That's just not true, we would much rather be notified of
something that a reputation list finds objectionable and take
it down ourselves than have Senderbase set a poor
reputation on dozens of IaaS customers.

I think the idea is that you're supposed to proactively monitor your
systems for abuse and generally make your network inhospitable to
spammers, not just reactively move the customer to a new IP address
when the unpaid anti-spammers kindly let you know you've been
detected.

Personally I see SORBS as the canary in the coal mine. Except for the
DUHL (which identifies dynamic IPs, not spamming activity) nobody
serious relies on SORBS' data. So, it doesn't much hurt when they list
you. But, like the canary that dies first if the air turns bad, if
you're careful to watch SORBS you know when you're headed for problems
which will get you listed by a real RBL.

Regards,
Bill Herrin



-- 
William D. Herrin ................ herrin () dirtside comĀ  bill () herrin us
3005 Crane Dr. ...................... Web: <http://bill.herrin.us/>
Falls Church, VA 22042-3004


Current thread: