[EMAIL PROTECTED] wrote on 05/02/2006 09:09:08 
AM:

> Probably not.  Such a blacklist is probably a good idea, but doesn't it
> overlap somewhat with XBL?
> 
> http://www.spamhaus.org/xbl/index.lasso

Yes, to a certain degree it will overlap with CBL (one of the lists 
aggregated into XBL).  XBL's description says it detects open relays and 
open proxies.  My thinking is to try to detect the zombies that are closed 
except to their master (or those renting capacity from the controller). 
Most of them will eventually end up on RBLs once they start sending spam, 
but why wait until then if they propagate the infection first?

_______________________________________________
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list [email protected]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Reply via email to