[SURBL-Discuss] Probable new data source: DNS queries hittingspamhaus lists

Jeff Chan jeffc at surbl.org
Wed Nov 10 17:02:16 CET 2004


On Wednesday, November 10, 2004, 7:29:32 AM, Steven Champeon wrote:
> on Wed, Nov 10, 2004 at 08:25:43AM -0500, Rob McEwen wrote:
>> CBL catches a LOT of spam... but it also periodically will list the
>> mailserver for respected IPS where that ISP had one user who send out a
>> bunch of spam and then CBL listed the IP address of that server.

> IME, it's not so much spam as virus-infected machines. One reason I
> continue to use CBL is that it keeps out 40% of the virus traffic I'd
> see otherwise - that the infected machines are often used as spam
> proxies is icing on the cake. And anything that encourages slacker
> mail admins to /stop emitting or proxying viruses/ is a good thing in
> my book. So I don't see what your problem is.

For some additional info, the current checks against XBL are for
NS (name server), unqualified domain and www.domain.com
currently.  MX records are not being checked since they're
less directly connected with URI domains.

Jeff C.
--
"If it appears in hams, then don't list it."



More information about the Discuss mailing list