* This is the modus mailing list * Interesting stats.. and explanation.
Do you exempt some IPs... for instance Vircom's mail server, for which I could see you might get 100 messages in three hours. Also though it might not be linear, an ISP with "10" times your mail subscriber base might have to set a threshold of "5" or "3" times the number of e-mails from a source. before blocking. What is your estimate based on "educated rule of thumb"? Cary Fitch Attend Peering Conference for ISP's, April 23-24, 2004, Dallas Texas Full info: http://www.peercon.org ----- Original Message ----- From: "Mike Herrera" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Saturday, February 07, 2004 12:25 PM Subject: [Modus] specific RBL > * This is the modus mailing list * > > If you've been on this list very long you know that one of my pet peeves are > the RBL's that are run by people who think that they are the net police. > They do stupid things and blacklist entire networks or domains for bizarre > reasons. There are blacklists that will blacklist a domain just because > they have x number of complaints about them, problem is, a lot of those > domains are being spoofed and the spam is not originating from them. An rbl > has to be careful to insure that its blacklistings are reasonable, reliable > and are actually blacklisting the right network and not spoofed domains etc. > > One of the real great things about a dynamic blacklist is that it blacklists > the originating ip of the spam, regardless of the domain name or anything > else. And the even nicer thing is that it also dynamically releases that ip > from the blacklist without intervention from anyone after a set amount of > time. It is reasonable because a mail server will not be blacklisted unless > spam is actually, and currently, being sent from that server, it is > reasonable because it will release the server from the blacklist once the > spam run is over or keep it there if it continues. Even if the originating > network were to complain, the defense is that you will stop the blacklist > once they stop the spam. > > We have used it for about 8 months now and I can attest to the accuracy and > effectiveness. If you want to see the results from one of our servers > showing the banned ip's and their release times you can view it at: > http://icarus.access-one.com/cgi-bin/ip_ban_check.cgi. > > > Regards, > > Mike Herrera > Access One Online Svcs. > http://www.access-one.com > > Attend Peering Conference for ISP's, > April 23-24, 2004, Dallas Texas > Full info: http://www.peercon.org > > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf > Of Darryl Dunkin > Sent: Saturday, February 07, 2004 12:10 PM > To: [EMAIL PROTECTED] > Subject: [Modus] specific RBL > > * This is the modus mailing list * > > These lists are somewhat frustrating as they are not always transient users, > and are created without indepth knowledge about the network they list. More > specifically, they list Covad DSL customers. Although Covad sells business > packages with static IPs and subnets for the purpose of running servers, it > makes it rough as those ranges are listed and blocked with a bad assumption > about their network. > > > > ** > To unsubscribe, send an Email to: [EMAIL PROTECTED] > with the word "UNSUBSCRIBE" in the body or subject line. ** To unsubscribe, send an Email to: [EMAIL PROTECTED] with the word "UNSUBSCRIBE" in the body or subject line.
