Re: [Asrg] I-D Action: draft-irtf-asrg-dnsbl-08.txt (fwd)

"Chris Lewis" <clewis@nortel.com> Wed, 19 November 2008 19:57 UTC

Return-Path: <asrg-bounces@irtf.org>
X-Original-To: asrg-archive@optimus.ietf.org
Delivered-To: ietfarch-asrg-archive@core3.amsl.com
Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5E1D428C201; Wed, 19 Nov 2008 11:57:41 -0800 (PST)
X-Original-To: asrg@core3.amsl.com
Delivered-To: asrg@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D8EA13A699F for <asrg@core3.amsl.com>; Wed, 19 Nov 2008 11:57:40 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.8
X-Spam-Level:
X-Spam-Status: No, score=-5.8 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, SARE_SUB_RAND_LETTRS4=0.799]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IB37CSCfvQts for <asrg@core3.amsl.com>; Wed, 19 Nov 2008 11:57:40 -0800 (PST)
Received: from zcars04f.nortel.com (zcars04f.nortel.com [47.129.242.57]) by core3.amsl.com (Postfix) with ESMTP id B38643A6ACF for <asrg@irtf.org>; Wed, 19 Nov 2008 11:57:39 -0800 (PST)
Received: from zrtphxs1.corp.nortel.com (zrtphxs1.corp.nortel.com [47.140.202.46]) by zcars04f.nortel.com (Switch-2.2.6/Switch-2.2.0) with ESMTP id mAJJvZ715580 for <asrg@irtf.org>; Wed, 19 Nov 2008 19:57:35 GMT
Received: from zrtphx5h0.corp.nortel.com ([47.140.202.65]) by zrtphxs1.corp.nortel.com with Microsoft SMTPSVC(6.0.3790.3959); Wed, 19 Nov 2008 14:57:35 -0500
Received: from [47.129.150.171] (47.129.150.171) by zrtphx5h0.corp.nortel.com (47.140.202.65) with Microsoft SMTP Server (TLS) id 8.1.311.2; Wed, 19 Nov 2008 14:57:34 -0500
Message-ID: <49246FAD.1080006@nortel.com>
Date: Wed, 19 Nov 2008 14:57:33 -0500
From: Chris Lewis <clewis@nortel.com>
Organization: Nortel
User-Agent: Thunderbird 2.0.0.17 (Windows/20080914)
MIME-Version: 1.0
To: Anti-Spam Research Group - IRTF <asrg@irtf.org>
References: <4606143.01227048087075.JavaMail.franck@franck-martins-macbook-pro.local> <49235469.8090306@nortel.com> <4923AC56.8060509@leisi.net> <934f64a20811191106p69bc9ec7j8440572ca67a18e8@mail.gmail.com>
In-Reply-To: <934f64a20811191106p69bc9ec7j8440572ca67a18e8@mail.gmail.com>
X-OriginalArrivalTime: 19 Nov 2008 19:57:35.0447 (UTC) FILETIME=[11131670:01C94A81]
Subject: Re: [Asrg] I-D Action: draft-irtf-asrg-dnsbl-08.txt (fwd)
X-BeenThere: asrg@irtf.org
X-Mailman-Version: 2.1.9
Precedence: list
Reply-To: Anti-Spam Research Group - IRTF <asrg@irtf.org>
List-Id: Anti-Spam Research Group - IRTF <asrg.irtf.org>
List-Unsubscribe: <https://www.irtf.org/mailman/listinfo/asrg>, <mailto:asrg-request@irtf.org?subject=unsubscribe>
List-Archive: <http://www.irtf.org/pipermail/asrg>
List-Post: <mailto:asrg@irtf.org>
List-Help: <mailto:asrg-request@irtf.org?subject=help>
List-Subscribe: <https://www.irtf.org/mailman/listinfo/asrg>, <mailto:asrg-request@irtf.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: asrg-bounces@irtf.org
Errors-To: asrg-bounces@irtf.org

David Nicol wrote:

> I believe we have two dots under discussion at this time which may be
> properly connected:
> Have RBL operators allow opting in for them, then send ARF reports on listing.

We had this conversation a little over a week ago in terms of
instrumenting MTAs to send off ARF reports automatically.

That might work on some smaller DNSBLs that work on a strict "spam in
hand" basis.  Eg: SBL.

But, ARF reports are poorly suited for some DNSBLs.  telekom.gov.tr, for
example, would need to handle 258684 ARF reports per week or so[+] (see
http://cbl.abuseat.org/domain.html) from the CBL.  There's no samples
for the PBL.  Etc.

[+] Ooh, shiny, telekom's CBL count is down from 440,000 as I reported
on November 12.  Everything seems down.  McColo disconnection...
_______________________________________________
Asrg mailing list
Asrg@irtf.org
https://www.irtf.org/mailman/listinfo/asrg