On 7 Aug 2020, at 5:56, Benoit Panizzon wrote:
Hi Gang
I am part of the SWINOG Anti-Spam Blacklists team which are used by a
handfull of swiss ISP.
Very early, we also started adding IPv6 addresses to the blacklist but
soon noticed that there is a potential problem with IPv6 and wildcard
entries.
Easy fix: do not use wildcards in IPv4 listings.
Both rbldnsd and BIND have other mechanisms for compactly generating
records that cover an IPv4 /24 network without also generating records
for all of an IPv6 /24 network. I would expect and hope that any other
authoritative nameserver would have similar mechanisms.
--
Bill Cole
[email protected] or [email protected]
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not For Hire (currently)