[Asrg] DNSBL caches and IPv6, again

"John R. Levine" <johnl@iecc.com> Wed, 19 September 2012 21:33 UTC

Return-Path: <johnl@iecc.com>
X-Original-To: asrg@ietfa.amsl.com
Delivered-To: asrg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7EB5B21E8044 for <asrg@ietfa.amsl.com>; Wed, 19 Sep 2012 14:33:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.6
X-Spam-Level:
X-Spam-Status: No, score=-102.6 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8RNk0g+MprYI for <asrg@ietfa.amsl.com>; Wed, 19 Sep 2012 14:33:09 -0700 (PDT)
Received: from leila.iecc.com (leila6.iecc.com [IPv6:2001:470:1f07:1126:0:4c:6569:6c61]) by ietfa.amsl.com (Postfix) with ESMTP id 8D40C21E8042 for <asrg@irtf.org>; Wed, 19 Sep 2012 14:33:09 -0700 (PDT)
Received: (qmail 18570 invoked from network); 19 Sep 2012 21:33:07 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=iecc.com; h=date:message-id:from:to:subject:mime-version:content-type:vbr-info:user-agent:cleverness; s=4889.505a3a13.k1209; bh=0l7ncn8phiuMKGQDS2Nxp9tJcQuV2Wu4Lnd3sBovzhw=; b=q6k6LyYXzqr5uyBnGx43YQPlJivsI6Vj/OVngeftSpCQEryQ50a529ieCCnE+A+hX8YT6RVoTnN6+hJOUuonw8YIDeib7fjs3sOyy/raWDR6m8p3fCRbJSD7PCNK+IFUYfgXjsbBF1p3wCgfhArKJQw4InyTNe7huJHKEwI3ud4=
VBR-Info: md=iecc.com; mc=all; mv=dwl.spamhaus.org
Received: (ofmipd 127.0.0.1); 19 Sep 2012 21:32:45 -0000
Date: 19 Sep 2012 17:33:07 -0400
Message-ID: <alpine.BSF.2.00.1209191729210.75412@joyce.lan>
From: "John R. Levine" <johnl@iecc.com>
To: "Anti Spam Research Group" <asrg@irtf.org>
User-Agent: Alpine 2.00 (BSF 1167 2008-08-23)
Cleverness: None detected
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII
Subject: [Asrg] DNSBL caches and IPv6, again
X-BeenThere: asrg@irtf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: Anti-Spam Research Group - IRTF <asrg@irtf.org>
List-Id: Anti-Spam Research Group - IRTF <asrg.irtf.org>
List-Unsubscribe: <http://www.irtf.org/mailman/options/asrg>, <mailto:asrg-request@irtf.org?subject=unsubscribe>
List-Archive: <http://www.irtf.org/mail-archive/web/asrg>
List-Post: <mailto:asrg@irtf.org>
List-Help: <mailto:asrg-request@irtf.org?subject=help>
List-Subscribe: <http://www.irtf.org/mailman/listinfo/asrg>, <mailto:asrg-request@irtf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Sep 2012 21:33:10 -0000

As I've mentioned a few time, I'm trying to figure out the cache behavior 
of DNSBLs, so we can try and predict whether IPv6 BLs would make the 
DNS melt down.

If I had traces of [IP,timestamp] from some medium sized mail sytems, I 
could do some cache simulations.  Medium is in in the range of a million 
connections a day.  Anyone have access to one of those?  Nobody has IPv6 
mail at that scale yet, but IPv4 would do fine for this.

I don't need to know whether the connection was for real mail or spam.  If 
you consider the IPs confidential, hashes or tokens would be fine so long 
as the same token consistently corresponds to the same IP.

R's,
John