Re: [Asrg] DNSBL and IPv6

Matthias Leisi <matthias@leisi.net> Fri, 26 October 2012 13:32 UTC

Return-Path: <matthias@leisi.net>
X-Original-To: asrg@ietfa.amsl.com
Delivered-To: asrg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2FF4A21F84AD for <asrg@ietfa.amsl.com>; Fri, 26 Oct 2012 06:32:35 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.627
X-Spam-Level:
X-Spam-Status: No, score=-2.627 tagged_above=-999 required=5 tests=[AWL=0.350, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PnkK57Og94LQ for <asrg@ietfa.amsl.com>; Fri, 26 Oct 2012 06:32:34 -0700 (PDT)
Received: from mail-ob0-f182.google.com (mail-ob0-f182.google.com [209.85.214.182]) by ietfa.amsl.com (Postfix) with ESMTP id AAFE221F85C1 for <asrg@irtf.org>; Fri, 26 Oct 2012 06:32:34 -0700 (PDT)
Received: by mail-ob0-f182.google.com with SMTP id wc20so3367030obb.13 for <asrg@irtf.org>; Fri, 26 Oct 2012 06:32:34 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :content-type:x-gm-message-state; bh=ETkraHwMJDyXKvEO+Y/igYVNDjGXdZ4vs8900m6VAic=; b=DvVg1fshbSZAEre4e35EE9M7Tyhr4TTSUoBbB8OMeDSYCPZa3P5LHuqDkRf/flrSoB 3ZsNRJhYI3PznJoVVytQEOxhdHOqgFjMRrWaHLlvhBA/wrZGNJNm0YWxUjMLqTthC7E/ 19Od1QDA8vZRiOaXU+fK1lpzgH4O7rRuGUt7M/kXLaJIriEXgl5uOOxijThcalQ0pCN2 Ezm4eHrl9HC4A/btGwrvyPUS3uHY7RaAM0Frw76H0emTm8dTNHK+C2xBiwHf28ie7wYL I0kDqPAlz4FRLiUaW06aNe/4XiVKs59OtpmV+boBblpeIoEBkV6LUZhWfs8L7JnG65F4 poEQ==
Received: by 10.182.5.168 with SMTP id t8mr18461598obt.32.1351258354261; Fri, 26 Oct 2012 06:32:34 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.76.3.173 with HTTP; Fri, 26 Oct 2012 06:32:14 -0700 (PDT)
In-Reply-To: <alpine.DEB.2.00.1210261525060.28593@uplift.swm.pp.se>
References: <20121025024859.3176.qmail@joyce.lan> <A6AF6224-421E-4483-834B-A1F658BEC7C6@blighty.com> <50891887.50103@pscs.co.uk> <0D79787962F6AE4B84B2CC41FC957D0B0D22655F@abn-exch1b.green.sophos> <50894EBB.5090907@bofhland.org> <alpine.DEB.2.00.1210261525060.28593@uplift.swm.pp.se>
From: Matthias Leisi <matthias@leisi.net>
Date: Fri, 26 Oct 2012 15:32:14 +0200
Message-ID: <CALgnk9reSog3AkC04knaogNm6CPZ70gQ1Oxf5tD45U8nHPjqSw@mail.gmail.com>
To: Anti-Spam Research Group - IRTF <asrg@irtf.org>
Content-Type: text/plain; charset=ISO-8859-1
X-Gm-Message-State: ALoCoQlZHR0oRcuETBJeiDRp1sVhJ4A2XuQZHl/SfHwxSHnC371fLvFcMo5iMr71FnDNTphZhicT
Subject: Re: [Asrg] DNSBL and IPv6
X-BeenThere: asrg@irtf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: Anti-Spam Research Group - IRTF <asrg@irtf.org>
List-Id: Anti-Spam Research Group - IRTF <asrg.irtf.org>
List-Unsubscribe: <http://www.irtf.org/mailman/options/asrg>, <mailto:asrg-request@irtf.org?subject=unsubscribe>
List-Archive: <http://www.irtf.org/mail-archive/web/asrg>
List-Post: <mailto:asrg@irtf.org>
List-Help: <mailto:asrg-request@irtf.org?subject=help>
List-Subscribe: <http://www.irtf.org/mailman/listinfo/asrg>, <mailto:asrg-request@irtf.org?subject=subscribe>
X-List-Received-Date: Fri, 26 Oct 2012 13:32:35 -0000

On Fri, Oct 26, 2012 at 3:27 PM, Mikael Abrahamsson <swmike@swm.pp.se> wrote:

>> 1) from one IP to another inside their own /64
>> 2) from one /64 to another
>> 3) from one ISP to another, particularly where showshoe-like schemes are
>> in place
>
> I believe it's going to be common enough that legitimate MTAs will move
> around within their /64 quite frequently (privacy extensions that are

Using a /64 as a default seems reasonable, but a new standard for
DNSxL lookups should provide some flexibility, either for a full list
("default prefix length = /56") or on a more granular level (using
John L.'s original proposal, or some other useful method).

-- Matthias