[SURBL-Discuss] RFC: SURBL software implemetation guidelines

[Jeff Chan]

On Tuesday, April 20, 2004, 8:39:50 AM, Jose Cruz wrote:
> Jeff Chan wrote:
>> On Sunday, April 18, 2004, 7:53:46 PM, Eric Kolve wrote:
>> 
>>>Currently SpamCopURI checks both the 2nd and 3rd level domain regardless
>>>of the TLD.  I believe SA 3.0 does a little better job of this.

>> Sounds good.  That should catch everything with few false
>> positives, since we're filtering out most ccTLDs on the data
>> side and not too many get reported in the first place.

> Why not declare wildcards records at DNS to solve randomness and doing a 
> single DNS query ?

> Instead of declaring

> spammer.com   A  127.0.0.1

> you could declare :

> spammer.com      A   127.0.0.2
> *.spammer.com    A   127.0.0.2

> Does this work ?

We're taking the opposite approach and removing the wildcards on
the client side before comparing them to the SURBL.  That way the
SURBL only gets the base domains.  The net results should be
similar; the difference is where the randomness is resolved.  We
also considered doing wildcard DNS but like the former approach
better. 

Jeff C.