Re: [mailop] Spamcop

2021-02-01 Thread Don Owens via mailop
, as opposed to returning an error, when the blocklist DNS is unavailable), or if it was something larger. ./don > On Jan 31, 2021, at 09:01, Don Owens wrote: > > We have the domain back now, but we have to wait for propagation delays. If > you query the name servers they Arne mentioned,

Re: [mailop] Spamcop

2021-02-01 Thread Don Owens via mailop
Yes, SpamCop is Cisco. I’m on it. ./don > On Jan 31, 2021, at 03:46, Graeme Fowler via mailop wrote: > > On 31 Jan 2021, at 10:24, Marc Bradshaw via mailop wrote: >> Is there anyone from Spamcop on the list? >> >> We are seeing some strange results right how, which suggest a domain

Re: [mailop] Spamcop

2021-01-31 Thread Don Owens via mailop
We have the domain back now, but we have to wait for propagation delays. If you query the name servers they Arne mentioned, that should give you the right IPs. Sorry for the trouble, folks. Now I have to go see who needs flogging. ./don > On Jan 31, 2021, at 08:36, Arne Jensen via mailop

Re: [mailop] Any Talos personnel on the list?

2020-04-25 Thread Don Owens via mailop
Contacted off-list. ./don > On Apr 24, 2020, at 15:42, Josh Nason via mailop wrote: > >  > Hi everyone — I was wondering if any Talos folks might be on the list. If so, > or if you have a good contact, we would love to chat with them. > > Thanks, > Josh from Dyn >

Re: [mailop] unique/shared public DKIM keys per domain?

2017-10-11 Thread Don Owens
+1 Never assume that something doesn’t matter. It all depends on what the numbers say. The selector and other fields are features that can potentially be used to predict malicious or spammy behavior. I’m not aware of such a pattern yet for selectors, but it may very well be that there will be

Re: [mailop] Talos Blocklist?

2017-08-04 Thread Don Owens
That list is made for open source Snort users to demonstrate the IP blocking capability of the open source engine. It's a small subset of the master list used for the commercial side of things. While useful, it's a very small subset, so it may change up quite a bit, due to sampling. So don't

Re: [mailop] Senderbase sold?

2017-05-25 Thread Don Owens
Just so everyone knows, Talos was formed from the SecApps group (data part of IronPort) and the data/research side of the more recent SourceFire acquisition. ./don > On May 25, 2017, at 07:20, Don Owens <d...@regexguy.com> wrote: > > Not sold: it got a face lift and rebranding.

Re: [mailop] Senderbase sold?

2017-05-25 Thread Don Owens
Not sold: it got a face lift and rebranding. SenderBase.org has been under Talos (the security research arm of Cisco) for years now. The plan is to eventually have more information on talosintelligence.com than the traditional SenderBase that you know (more information on malware, etc.). The