[sniffer] Opening truncate.gbudb.net

2010-04-29 Thread Pete McNeil

Hi Sniffer Folks,

We have been testing a blacklist based on real-time GBUdb data 
(generated from Message Sniffer).


We have decided to experiment with opening up the blacklist for a wider 
audience and so as of now you can use truncate.gbudb.net as an ip4r test.


You should get a result of 127.0.0.1 if the IP is well into the truncate 
range -- That is: truncate.gbudb.net is designed to be 
ultra-conservative so that it should be safe to reject connections based 
on the test in most cases. This also means that it won't block 
everything -- only the worst of the worst. That said, the folks who have 
been testing it have reported that it did drop a significant amount of 
traffic from their systems on average.


Please keep us all posted about how it's working for you.

Thanks,

_M

#
This message is sent to you because you are subscribed to
 the mailing list sniffer@sortmonster.com.
This list is for discussing Message Sniffer,
Anti-spam, Anti-Malware, and related email topics.
For More information see http://www.armresearch.com
To unsubscribe, E-mail to: sniffer-...@sortmonster.com
To switch to the DIGEST mode, E-mail to sniffer-dig...@sortmonster.com
To switch to the INDEX mode, E-mail to sniffer-in...@sortmonster.com
Send administrative queries to  sniffer-requ...@sortmonster.com



[sniffer] Re: Opening truncate.gbudb.net

2010-04-29 Thread John Dobbin
I've added it as a warn_if_reject on a backup mx that only seems to
process junk...


-Original Message-
From: Message Sniffer Community [mailto:snif...@sortmonster.com] On
Behalf Of Pete McNeil
Sent: Thursday, April 29, 2010 4:08 PM
To: Message Sniffer Community
Subject: [sniffer] Opening truncate.gbudb.net

Hi Sniffer Folks,

We have been testing a blacklist based on real-time GBUdb data 
(generated from Message Sniffer).

We have decided to experiment with opening up the blacklist for a wider 
audience and so as of now you can use truncate.gbudb.net as an ip4r
test.

You should get a result of 127.0.0.1 if the IP is well into the truncate

range -- That is: truncate.gbudb.net is designed to be 
ultra-conservative so that it should be safe to reject connections based

on the test in most cases. This also means that it won't block 
everything -- only the worst of the worst. That said, the folks who have

been testing it have reported that it did drop a significant amount of 
traffic from their systems on average.

Please keep us all posted about how it's working for you.

Thanks,

_M

#
This message is sent to you because you are subscribed to
  the mailing list sniffer@sortmonster.com.
This list is for discussing Message Sniffer,
Anti-spam, Anti-Malware, and related email topics.
For More information see http://www.armresearch.com
To unsubscribe, E-mail to: sniffer-...@sortmonster.com
To switch to the DIGEST mode, E-mail to sniffer-dig...@sortmonster.com
To switch to the INDEX mode, E-mail to sniffer-in...@sortmonster.com
Send administrative queries to  sniffer-requ...@sortmonster.com



#
This message is sent to you because you are subscribed to
  the mailing list sniffer@sortmonster.com.
This list is for discussing Message Sniffer,
Anti-spam, Anti-Malware, and related email topics.
For More information see http://www.armresearch.com
To unsubscribe, E-mail to: sniffer-...@sortmonster.com
To switch to the DIGEST mode, E-mail to sniffer-dig...@sortmonster.com
To switch to the INDEX mode, E-mail to sniffer-in...@sortmonster.com
Send administrative queries to  sniffer-requ...@sortmonster.com