Re: [Asrg] DNSBL caches and IPv6, again

"John Levine" <johnl@taugh.com> Thu, 20 September 2012 06:08 UTC

Return-Path: <johnl@iecc.com>
X-Original-To: asrg@ietfa.amsl.com
Delivered-To: asrg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E5E0511E808E for <asrg@ietfa.amsl.com>; Wed, 19 Sep 2012 23:08:36 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -111.192
X-Spam-Level:
X-Spam-Status: No, score=-111.192 tagged_above=-999 required=5 tests=[AWL=0.007, BAYES_00=-2.599, HABEAS_ACCREDITED_SOI=-4.3, RCVD_IN_BSP_TRUSTED=-4.3, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WeYxjHRj3vwA for <asrg@ietfa.amsl.com>; Wed, 19 Sep 2012 23:08:36 -0700 (PDT)
Received: from leila.iecc.com (leila6.iecc.com [IPv6:2001:470:1f07:1126:0:4c:6569:6c61]) by ietfa.amsl.com (Postfix) with ESMTP id 0FF1B11E808D for <asrg@irtf.org>; Wed, 19 Sep 2012 23:08:35 -0700 (PDT)
Received: (qmail 5226 invoked from network); 20 Sep 2012 06:08:31 -0000
Received: from leila.iecc.com (64.57.183.34) by mail1.iecc.com with QMQP; 20 Sep 2012 06:08:31 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=iecc.com; h=date:message-id:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:vbr-info; s=505ab2df.xn--3zv.k1208; i=johnl@user.iecc.com; bh=1Vw0HMhlPYPi+yMyUksyuyvq4WmAJZ9dv+5KGHuOqfM=; b=MDG0m8Iwh0gQNpq9stReKCLEuX5wdufgnWW/BlGb2GCrLXqm7OLl4xLWGrWcCpxDi23CoFSFcSzXfgKZq0rEteZ2rSSYvCfwmedfB6fGlQaLw/aK2NJaBHJq5z6IEzYiZWNeX5U0ZRB09mgIDNi7FGSejr0NEuSt2+xr0rv1kic=
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=taugh.com; h=date:message-id:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:vbr-info; s=505ab2df.xn--3zv.k1208; olt=johnl@user.iecc.com; bh=1Vw0HMhlPYPi+yMyUksyuyvq4WmAJZ9dv+5KGHuOqfM=; b=tEeZcctYx6ukNZMmNBt0HCb4WF9oxwvYvTWeYBsreQFOm0MvV/O8MdwJ/lSfnrw/xziCO3WfavTh3THZ4RajE3EsnNrPxtccpBUs+9LGCCtYNWHBsVpreUOAzOBBO6139hcsdItuZoIJoEKgAHEcZP+MyKOiu0y+y+YHNAwDVeQ=
VBR-Info: md=iecc.com; mc=all; mv=dwl.spamhaus.org
Date: 20 Sep 2012 06:08:09 -0000
Message-ID: <20120920060809.92186.qmail@joyce.lan>
From: "John Levine" <johnl@taugh.com>
To: asrg@irtf.org
In-Reply-To: <CALgnk9rvTgck03PUc9fQXLMq0Vw8AW8qyjkZS89yz61hEDpRmQ@mail.gmail.com>
Organization:
X-Headerized: yes
Mime-Version: 1.0
Content-type: text/plain; charset=utf-8
Content-transfer-encoding: 7bit
Subject: Re: [Asrg] DNSBL caches and IPv6, again
X-BeenThere: asrg@irtf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: Anti-Spam Research Group - IRTF <asrg@irtf.org>
List-Id: Anti-Spam Research Group - IRTF <asrg.irtf.org>
List-Unsubscribe: <http://www.irtf.org/mailman/options/asrg>, <mailto:asrg-request@irtf.org?subject=unsubscribe>
List-Archive: <http://www.irtf.org/mail-archive/web/asrg>
List-Post: <mailto:asrg@irtf.org>
List-Help: <mailto:asrg-request@irtf.org?subject=help>
List-Subscribe: <http://www.irtf.org/mailman/listinfo/asrg>, <mailto:asrg-request@irtf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Sep 2012 06:08:37 -0000

>> So, anyone got server log [IP,timestamp] data they can share?
>
>I have [IP, # of queries] on a daily level from DNS query logs from
>dnswl.org, eg in a file named "2012-08-03.aggregate":

Thanks, but I really need mail server logs.

I have logs for korea.services.net which is still surprisingly
popular.  Perhaps we could compare notes sometime.

R's,
John