At 8:47 PM -0400 8/31/03, Timothy Binder imposed structure on a stream of electrons, yielding:
On Sunday, August 31, 2003, at 08:32 PM, Bill Cole wrote:

As for removal policy, the website says that there will be a simple automated removal system but there does not in fact seem to be one anywhere visible. On the other hand, the address [EMAIL PROTECTED] is given as a contact address, so presumably there's someone reading that and willing to delist addresses for the asking.

It isn't immediately obvious. If you look up an IP address and it's on the list, you get the option:


IP Address 61.159.235.36 was found in the CBL.
It was detected at 2003-08-31 01:00 GMT (+/- 30 minutes).
If this address is listed incorrectly, you may request its removal.


Ahh... and the last three words are linked to the removal script. Interesting.


This was in my logs (and was being sent to one of my spam traps).


as well it should be. It looks like that address is on just about everyone's list of open proxies.

What I like about the CBL over OPM is that it is fast and full without testing: it looks at what machines are doing to traps, and wastes no time in listing the ones acting badly. I've seen the same address get spam through unlisted and come back 5 minutes later as listed, hinting at the fact that the CBL traps are getting hit pretty reliably in spam runs. I like it better than the monkeys.com UPL because the UPL has adopted a policy of listing various addresses that are not open proxies at all but are associated with the providers to open proxies. i.e. UPL has turned into SPEWS. I like it better than SpamCop because SpamCop uses a similar concept with a horrendously sloppy set of data sources which causes it to regularly list perfectly non-spam mail sources.

Mostly I like it because it catches about a third of my spam without any hint of false positives and a policy that explicitly rejects the idea of collateral damage as a tool of making anyone change.

--
Bill Cole [EMAIL PROTECTED]



############################################################# This message is sent to you because you are subscribed to the mailing list <[EMAIL PROTECTED]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>



Reply via email to