[sniffer] Re: Testing a black-list,.. want to help?

2010-01-22 Thread Darin Cox
Hi Pete,

We would be interested in testing the DNSBL.

Darin.


- Original Message - 
From: Pete McNeil madscient...@armresearch.com
To: Message Sniffer Community sniffer@sortmonster.com
Sent: Friday, January 22, 2010 12:48 PM
Subject: [sniffer] Testing a black-list,.. want to help?


Hello sniffer folks,

I'm testing a dns based blocking list for a future product release.
The list works in the usual way and is derived from GBUdb IP reputation 
data.
The list I want to test contains IPs that are statistically in the 
Truncate range from the perspective of the larger cloud.

If you are interested in testing this for a time please email support@ 
and we will give you the domain for the list.

This might be particularly helpful for you if you are using a system 
that takes connections first and filters later.

We only have a few slots open for testing.

Thanks!

_M


#
This message is sent to you because you are subscribed to
  the mailing list sniffer@sortmonster.com.
This list is for discussing Message Sniffer,
Anti-spam, Anti-Malware, and related email topics.
For More information see http://www.armresearch.com
To unsubscribe, E-mail to: sniffer-...@sortmonster.com
To switch to the DIGEST mode, E-mail to sniffer-dig...@sortmonster.com
To switch to the INDEX mode, E-mail to sniffer-in...@sortmonster.com
Send administrative queries to  sniffer-requ...@sortmonster.com



#
This message is sent to you because you are subscribed to
  the mailing list sniffer@sortmonster.com.
This list is for discussing Message Sniffer,
Anti-spam, Anti-Malware, and related email topics.
For More information see http://www.armresearch.com
To unsubscribe, E-mail to: sniffer-...@sortmonster.com
To switch to the DIGEST mode, E-mail to sniffer-dig...@sortmonster.com
To switch to the INDEX mode, E-mail to sniffer-in...@sortmonster.com
Send administrative queries to  sniffer-requ...@sortmonster.com



[sniffer] Re: Testing a black-list,.. want to help?

2010-01-22 Thread Pete McNeil

Darin Cox wrote:

Hi Pete,

We would be interested in testing the DNSBL.
  

Please don't post this publicly while it's still in testing.

truncate.gbudb.net

The bl contains IPs that are considered to be in the truncate range from 
the perspective of the GBUdb cloud. This is slightly different than data 
for any particular GBUdb node.


The bl returns 127.0.0.1 if the IP is on the list.

When we release the product we will provide access to the bl for a 
modest annual fee for each IP on your system that will access the zone. 
We will prefer that you set up your NS (bind 9.3+) as a slave so that it 
can receive IXFR updates.


If you are interested in testing the IXFR methodology please let us know 
and we'll set up the ACLs for you.


Please keep us posted on your testing -- we want to gather as much 
feedback as possible.


Thanks!

_M


#
This message is sent to you because you are subscribed to
 the mailing list sniffer@sortmonster.com.
This list is for discussing Message Sniffer,
Anti-spam, Anti-Malware, and related email topics.
For More information see http://www.armresearch.com
To unsubscribe, E-mail to: sniffer-...@sortmonster.com
To switch to the DIGEST mode, E-mail to sniffer-dig...@sortmonster.com
To switch to the INDEX mode, E-mail to sniffer-in...@sortmonster.com
Send administrative queries to  sniffer-requ...@sortmonster.com



[sniffer] Re: Testing a black-list,.. want to help?

2010-01-22 Thread Pete McNeil

Pete McNeil wrote:

Darin Cox wrote:

Hi Pete,

We would be interested in testing the DNSBL.
  

Please don't post this publicly while it's still in testing.

truncate.gbudb.net

Ok... I blew it. New something like that would happen.

If you are interested in testing please let us know the IP of your 
resolver so that we can update the ACLs.


Thanks!

_M


#
This message is sent to you because you are subscribed to
 the mailing list sniffer@sortmonster.com.
This list is for discussing Message Sniffer,
Anti-spam, Anti-Malware, and related email topics.
For More information see http://www.armresearch.com
To unsubscribe, E-mail to: sniffer-...@sortmonster.com
To switch to the DIGEST mode, E-mail to sniffer-dig...@sortmonster.com
To switch to the INDEX mode, E-mail to sniffer-in...@sortmonster.com
Send administrative queries to  sniffer-requ...@sortmonster.com