* This is the modus mailing list *

If you've been on this list very long you know that one of my pet peeves are
the RBL's that are run by people who think that they are the net police.
They do stupid things and blacklist entire networks or domains for bizarre
reasons.  There are blacklists that will blacklist a domain just because
they have x number of complaints about them, problem is, a lot of those
domains are being spoofed and the spam is not originating from them.  An rbl
has to be careful to insure that its blacklistings are reasonable, reliable
and are actually blacklisting the right network and not spoofed domains etc.

One of the real great things about a dynamic blacklist is that it blacklists
the originating ip of the spam, regardless of the domain name or anything
else.  And the even nicer thing is that it also dynamically releases that ip
from the blacklist without intervention from anyone after a set amount of
time.  It is reasonable because a mail server will not be blacklisted unless
spam is actually, and currently, being sent from that server, it is
reasonable because it will release the server from the blacklist once the
spam run is over or keep it there if it continues.  Even if the originating
network were to complain, the defense is that you will stop the blacklist
once they stop the spam.

We have used it for about 8 months now and I can attest to the accuracy and
effectiveness.  If you want to see the results from one of our servers
showing the banned ip's and their release times you can view it at:
http://icarus.access-one.com/cgi-bin/ip_ban_check.cgi.


Regards,
 
Mike Herrera
Access One Online Svcs.
http://www.access-one.com

Attend Peering Conference for ISP's,
April 23-24, 2004, Dallas Texas
Full info: http://www.peercon.org
 

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of Darryl Dunkin
Sent: Saturday, February 07, 2004 12:10 PM
To: [EMAIL PROTECTED]
Subject: [Modus] specific RBL

* This is the modus mailing list *

These lists are somewhat frustrating as they are not always transient users,
and are created without indepth knowledge about the network they list. More
specifically, they list Covad DSL customers. Although Covad sells business
packages with static IPs and subnets for the purpose of running servers, it
makes it rough as those ranges are listed and blocked with a bad assumption
about their network.



**
To unsubscribe, send an Email to: [EMAIL PROTECTED]
with the word "UNSUBSCRIBE" in the body or subject line.

Reply via email to