AW: AW: [swinog] Whitelist website
Ok there are some whitelists, but what is it worth, when entries like *.mail.ru are included? (And who entered this?) -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Matthias Leisi Gesendet: Dienstag, 27. März 2007 15:47 An: swinog@swinog.ch Betreff: Re: AW: [swinog] Whitelist website Of course, but you got the hostname wrong. It's http://dnswl.swinog.ch aka http://antispam.imp.ch/swinog-dnsrbl-whitelist But not only Swiss Mailservers, this would be a bit useless :-) And of course there is also dnswl.org ;-) [Note that dnswl.org data also includes the Swinog whitelist, updated (ir)regularly.] -- Matthias (one of [EMAIL PROTECTED]) ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: AW: AW: [swinog] Whitelist website
Am Mittwoch, 28. März 2007 13.32 schrieb Radek Mrskos: Ok there are some whitelists, but what is it worth, when entries like *.mail.ru are included? (And who entered this?) As far as I rememver we were contacted by the mail mistress of mail.ru who asked for those ranges to be entered. I know there is a lot of spam around comming from this range, but as far as we have seen they all had correct Received: or X-Origination-IP: headers before the mail.ru mailserver ip address. This means our spamtraps would blacklist the right addresses of the end(ab)users and also spamassassin is able to score them correctly. Mit freundlichen Grüssen Benoit Panizzon -- I m p r o W a r e A G-System Services __ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 PrattelnFax +41 61 826 93 01 Schweiz Web http://www.imp.ch __ pgpcs0E1TNNmX.pgp Description: PGP signature ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
AW: AW: AW: [swinog] Whitelist website
Ok, but this is exactly what do not belongs to this list. *.mail.ru (many others also) is a spamer domain. If the postmaster of *.rr.com, *.net.br, *.com.br calls you to enter his ranges, will you enter it? Cheers Radek MrskosEmail[EMAIL PROTECTED] volume.ch Tel:+41 43 534 40 24 Baechlerstr. 12 Mob:+41 79 219 68 66 CH-8802 Kilchberg Fax:+41 86079 2196 866 PGP:0x8CB69F6D URL:http://volume.ch PS: Was the voice of this mistress at least erotic? ;) -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Benoit Panizzon Gesendet: Mittwoch, 28. März 2007 13:49 An: swinog@swinog.ch Betreff: Re: AW: AW: [swinog] Whitelist website Am Mittwoch, 28. März 2007 13.32 schrieb Radek Mrskos: Ok there are some whitelists, but what is it worth, when entries like *.mail.ru are included? (And who entered this?) As far as I rememver we were contacted by the mail mistress of mail.ru who asked for those ranges to be entered. I know there is a lot of spam around comming from this range, but as far as we have seen they all had correct Received: or X-Origination-IP: headers before the mail.ru mailserver ip address. This means our spamtraps would blacklist the right addresses of the end(ab)users and also spamassassin is able to score them correctly. Mit freundlichen Grüssen Benoit Panizzon -- I m p r o W a r e A G-System Services __ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 PrattelnFax +41 61 826 93 01 Schweiz Web http://www.imp.ch __ ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: AW: AW: AW: [swinog] Whitelist website
Radek Mrskos wrote: Ok, but this is exactly what do not belongs to this list. *.mail.ru (many others also) is a spamer domain. If the postmaster of *.rr.com, *.net.br, *.com.br calls you to enter his ranges, will you enter it? 194.67.23.0/24 does not equal the full set of *.mail.ru hostnames. Similarly, dnswl.org contains three /24s for uol.com.br (see http://www.dnswl.org/search.pl?s=3633). Now this is not a statement that uol.com.br is all nice and cosy, but it's a statement of the fact that the postmaster for uol.com.br told us that these are the ranges for the mailservers (and we verified that using eg senderbase.org). Since such ranges are usually not as trustworthy as /32s of well-respected mailserver operators, dnswl.org lists such ranges with a score of none; for all practical reasons, this should translate into do not greylist, since there is most likely a legitimate mailserver at the other end who will retry anyway. Yes, whitelisting incurs the risk of missing some spam. But this risk is usually lower than catching a non-spam in a spamfilter. -- Matthias ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
[swinog] dnswl.org ?
Matthias Leisi wrote: 194.67.23.0/24 does not equal the full set of *.mail.ru hostnames. Similarly, dnswl.org contains three /24s for uol.com.br (see http://www.dnswl.org/search.pl?s=3633). Now this is not a statement that uol.com.br is all nice and cosy, but it's a statement of the fact that the postmaster for uol.com.br told us that these are the ranges for the mailservers (and we verified that using eg senderbase.org). Since such ranges are usually not as trustworthy as /32s of well-respected mailserver operators, dnswl.org lists such ranges with a score of none; for all practical reasons, this should translate into do not greylist, since there is most likely a legitimate mailserver at the other end who will retry anyway. This sounds like a pretty good idea, but judging by the size of the rbldnsd file, it's not very popular? Only 4317 entries. /Per Jessen, Zürich ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
