IETF Logo Mail Archive

Re: [Asrg] RFC 6471 and "listing the Internet" as a punishment

SM <sm@resistor.net> Wed, 25 January 2012 18:39 UTC

Return-Path: <sm@resistor.net>
X-Original-To: asrg@ietfa.amsl.com
Delivered-To: asrg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A0F9B21F85E4 for <asrg@ietfa.amsl.com>; Wed, 25 Jan 2012 10:39:04 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.623
X-Spam-Level:
X-Spam-Status: No, score=-102.623 tagged_above=-999 required=5 tests=[AWL=-0.024, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fbErHtDAZY-D for <asrg@ietfa.amsl.com>; Wed, 25 Jan 2012 10:39:02 -0800 (PST)
Received: from mx.ipv6.elandsys.com (mx.ipv6.elandsys.com [IPv6:2001:470:f329:1::1]) by ietfa.amsl.com (Postfix) with ESMTP id 22AB221F85D5 for <asrg@irtf.org>; Wed, 25 Jan 2012 10:39:02 -0800 (PST)
Received: from SUBMAN.resistor.net (IDENT:sm@localhost [127.0.0.1]) (authenticated bits=0) by mx.elandsys.com (8.14.5/8.14.5) with ESMTP id q0PIcnBE013972 for <asrg@irtf.org>; Wed, 25 Jan 2012 10:38:53 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=opendkim.org; s=mail2010; t=1327516734; i=@resistor.net; bh=0foDof4qR6uG0wAp2j9+640o9ccRRTfLOIlLHWVlfFI=; h=Message-Id:Date:To:From:Subject:In-Reply-To:References: Mime-Version:Content-Type:Cc; b=MIq55/3+EBrp1OhsEo6dwI7VrI9CYDBLYuK3TSldnpZ+vF9xYKdoDmmqtMDyLTFPd E5FQ5SG+7w5k/PM+24o7Z1owFmxU2H/EIv7pZOUgROcVD9v+Cyz7Wqc8bwwa33eKpB y5qSD0jB+58M1bpCIu0DAZ0Va+DvX8KtM/4D7lJg=
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=resistor.net; s=mail; t=1327516734; i=@resistor.net; bh=0foDof4qR6uG0wAp2j9+640o9ccRRTfLOIlLHWVlfFI=; h=Message-Id:Date:To:From:Subject:In-Reply-To:References: Mime-Version:Content-Type:Cc; b=XPJlNqJPx0gd2sQYKO6YEoFHoQaiPe8NsLc+t6d4AoVRISNj7lkjPErCr1HTjulC0 3qduoX+WCTqWEFE6o/uETr7RiyvaFSYKlKFWdn/NsnXHRv4efIw+Vj5mCVJTRP3BQq IkortlEiNLBA4bz9v6qG+k4UPfAfvPIA98YJUl4s=
Message-Id: <6.2.5.6.2.20120125102806.0ae6afe8@resistor.net>
X-Mailer: QUALCOMM Windows Eudora Version 6.2.5.6
Date: Wed, 25 Jan 2012 10:37:52 -0800
To: Anti-Spam Research Group - IRTF <asrg@irtf.org>
From: SM <sm@resistor.net>
In-Reply-To: <18B53BA2A483AD45962AAD1397BE13253846E0FE87@UK-EXCHMBX1.gre en.sophos>
References: <18B53BA2A483AD45962AAD1397BE13253846E0FE87@UK-EXCHMBX1.green.sophos>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
Subject: Re: [Asrg] RFC 6471 and "listing the Internet" as a punishment
X-BeenThere: asrg@irtf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: Anti-Spam Research Group - IRTF <asrg@irtf.org>
List-Id: Anti-Spam Research Group - IRTF <asrg.irtf.org>
List-Unsubscribe: <http://www.irtf.org/mailman/options/asrg>, <mailto:asrg-request@irtf.org?subject=unsubscribe>
List-Archive: <http://www.irtf.org/mail-archive/web/asrg>
List-Post: <mailto:asrg@irtf.org>
List-Help: <mailto:asrg-request@irtf.org?subject=help>
List-Subscribe: <http://www.irtf.org/mailman/listinfo/asrg>, <mailto:asrg-request@irtf.org?subject=subscribe>
X-List-Received-Date: Wed, 25 Jan 2012 18:39:04 -0000

At 07:07 24-01-2012, Martijn Grooten wrote:
>(Vamsoft ORF is a spam-filter.) Basically uribl.com was returning 
>127.0.0.1 to _all_ queries from nameservers that are sending high 
>volumes (presumably without paying for it) as some kind of 
>punishment. http://uribl.com/ confirms that.

   "After investigating this further, it seems the affected ORF users
    all use Google public DNS servers for the queries (or use such servers
    as forwarders in their local DNS configuration)."

Anyone using open recursive DNS servers or their ISP's DNS server for 
DNSBL queries is asking for trouble.  The listing is to get the 
attention of the sender.  It's "antisocial".

Regards,
-sm

v2.8.7 | Report a Bug | By Email