[SURBL-Discuss] general questions.....

Rob McEwen (PowerView Systems) rob at powerviewsystems.com
Thu Nov 18 20:59:20 CET 2004


> AN example to my own question:
> 63.251.163.112

Chris:

(1) Why then is this IP address NOT listed in either SpamHaus (all lists) and NOT listed in dsbl.org? Is there **ANOTHER** RBL list which WOULD include this IP, but WITHOUT the kind of FPs that you get with many RBLs.

(2) Could **other** legitimate mail be coming from that IP address. Certainly, such mail **deserves** to get blocked because of the "company it keeps"... but try explaining that to a client. Basically IP blocking is very drastic. Going from SURBL blocking to IP blocking is like using a sledgehammer rather than a surgeon's scalpel.

I'm not against this approach. But consider that not everyone used SpamAssassin. Some programs can't automatically check the nameserver's IP against RBLs, etc. Also, I strongly recommend not taking these out of SURBL. Certainly, it would be good to encourage people to block in ways that save processing time and lookups where needed. But don't use that as an excuse to remove these because not everyone will be know to do this type of blocking and removing these from SURBL will give them a pass. (not to mention, what happens if the domain name stays the same, but switches hosting providers?)

Rob McEwen


More information about the Discuss mailing list