> Does the bogon list at cymru.com not incorporate all the other sources > anyway? Can it not be used directly?
No. We also filter out multicast addresses. Among other reasons, there's no good way to get the data (see below) and it's a web page, not a service. > How closely does SpamAssassin track changes to the bogon list (new > blocks are allocated by IANA several times a year)? Do you intend to > produce a point release when new blocks are allocated, to avoid FPs? Close, but we could do a better job. > It strikes me that the best place for dynamic data like this would be > in a DNSBL. Too unreliable and much performance impact on filtering for data that is not that dynamic. I'm pretty sure it's ideally placed into a configuration file (like trusted_networks). We can ship a default set and allow people to updated. Once we support daily updates, we can just push out new versions that way. Daniel -- Daniel Quinlan http://www.pathname.com/~quinlan/
