IETF Logo Mail Archive

Re: [Asrg] RFC 6471 and "listing the Internet" as a punishment

Rich Kulawiec <rsk@gsp.org> Tue, 24 January 2012 15:35 UTC

Return-Path: <rsk@gsp.org>
X-Original-To: asrg@ietfa.amsl.com
Delivered-To: asrg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3802921F84DC for <asrg@ietfa.amsl.com>; Tue, 24 Jan 2012 07:35:55 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.599
X-Spam-Level:
X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iOUFMSgNk2kK for <asrg@ietfa.amsl.com>; Tue, 24 Jan 2012 07:35:51 -0800 (PST)
Received: from taos.firemountain.net (taos.firemountain.net [207.114.3.54]) by ietfa.amsl.com (Postfix) with ESMTP id D51F421F84BF for <asrg@irtf.org>; Tue, 24 Jan 2012 07:35:50 -0800 (PST)
Received: from squonk.gsp.org (bltmd-207.114.17.210.dsl.charm.net [207.114.17.210]) by taos.firemountain.net (8.14.5/8.14.5) with ESMTP id q0OFZnDd018771 for <asrg@irtf.org>; Tue, 24 Jan 2012 10:35:50 -0500 (EST)
Received: from vorlon.gsp.org (vorlon.gsp.org [192.168.0.20]) by squonk.gsp.org (8.14.3/8.14.3) with ESMTP id q0OFikZm008360 for <asrg@irtf.org>; Tue, 24 Jan 2012 10:44:46 -0500 (EST)
Received: from localhost6.localdomain6 (localhost.localdomain [127.0.0.1]) by vorlon.gsp.org (8.14.3/8.14.3/Debian-9.2ubuntu1) with ESMTP id q0OFZbsr008482 for <asrg@irtf.org>; Tue, 24 Jan 2012 10:35:37 -0500
Received: (from rsk@localhost) by localhost6.localdomain6 (8.14.3/8.14.3/Submit) id q0OFZXC0008481 for asrg@irtf.org; Tue, 24 Jan 2012 10:35:33 -0500
Date: Tue, 24 Jan 2012 10:35:33 -0500
From: Rich Kulawiec <rsk@gsp.org>
To: Anti-Spam Research Group - IRTF <asrg@irtf.org>
Message-ID: <20120124153531.GA8414@gsp.org>
References: <18B53BA2A483AD45962AAD1397BE13253846E0FE87@UK-EXCHMBX1.green.sophos> <4F1ECBE4.1050802@bofhland.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <4F1ECBE4.1050802@bofhland.org>
User-Agent: Mutt/1.5.20 (2009-06-14)
Subject: Re: [Asrg] RFC 6471 and "listing the Internet" as a punishment
X-BeenThere: asrg@irtf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: Anti-Spam Research Group - IRTF <asrg@irtf.org>
List-Id: Anti-Spam Research Group - IRTF <asrg.irtf.org>
List-Unsubscribe: <http://www.irtf.org/mailman/options/asrg>, <mailto:asrg-request@irtf.org?subject=unsubscribe>
List-Archive: <http://www.irtf.org/mail-archive/web/asrg>
List-Post: <mailto:asrg@irtf.org>
List-Help: <mailto:asrg-request@irtf.org?subject=help>
List-Subscribe: <http://www.irtf.org/mailman/listinfo/asrg>, <mailto:asrg-request@irtf.org?subject=subscribe>
X-List-Received-Date: Tue, 24 Jan 2012 15:35:55 -0000

On Tue, Jan 24, 2012 at 04:19:00PM +0100, Emanuele Balla (aka Skull) wrote:
> and again, in point 3.5:
> 
> ?  A functioning DNSBL MUST NOT list 127.0.0.1.  There are a number of
>    mail server implementations that do not cope with this well, and many
>    will use a positive response for 127.0.0.1 as an indication that the
>    DNSBL is shut down and listing the entire Internet.?
> 
> That is not clearly against "listing everything as a punishment", but
> means uribl.com is technically "non-functional"... ;-)

I may well be misreading this report AND the RFC (coffee level: alarmingly
low) but it appears to me that this DNSBL is not listing "127.0.0.1",
but is returning 127.0.0.1 in response to queries for "example.com"
(and all other domains) when those queries are issued from certain hosts.
(And I presume those hosts are the set which have issued excessive
and/or unwelcome queries in the opinions of the DNSBL's operators.)

---rsk

v2.8.7 | Report a Bug | By Email