Re: uncooperative DNSBLs, was several messages

Peter Dambier <peter@peter-dambier.de> Thu, 13 November 2008 22:29 UTC

Return-Path: <ietf-bounces@ietf.org>
X-Original-To: ietf-archive@megatron.ietf.org
Delivered-To: ietfarch-ietf-archive@core3.amsl.com
Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 38EEF28C124; Thu, 13 Nov 2008 14:29:33 -0800 (PST)
X-Original-To: ietf@core3.amsl.com
Delivered-To: ietf@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 987DF28C124 for <ietf@core3.amsl.com>; Thu, 13 Nov 2008 14:29:31 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M0tyO2jRiaWA for <ietf@core3.amsl.com>; Thu, 13 Nov 2008 14:29:30 -0800 (PST)
Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by core3.amsl.com (Postfix) with SMTP id DEA903A6807 for <ietf@ietf.org>; Thu, 13 Nov 2008 14:29:29 -0800 (PST)
Received: (qmail invoked by alias); 13 Nov 2008 22:29:29 -0000
Received: from p3EE3ED4F.dip.t-dialin.net (EHLO [7.19.30.41]) [62.227.237.79] by mail.gmx.net (mp037) with SMTP; 13 Nov 2008 23:29:29 +0100
X-Authenticated: #8956597
X-Provags-ID: V01U2FsdGVkX1/7/swofCn7CgpaXKNQCNyLd2Fpdir4z6taKXSE92 5byC0419MUPQLu
Message-ID: <491CAAEC.9050604@peter-dambier.de>
Date: Thu, 13 Nov 2008 23:32:12 +0100
From: Peter Dambier <peter@peter-dambier.de>
Organization: Cesidian Root
User-Agent: Thunderbird 2.0.0.17 (X11/20080925)
MIME-Version: 1.0
To: "ietf@ietf.org" <ietf@ietf.org>
Subject: Re: uncooperative DNSBLs, was several messages
References: <Pine.LNX.4.33.0811121942450.12067-100000@egate.xpasc.com> <20081113112302.38928.qmail@simone.iecc.com> <e0c581530811130740g1db5cbfehbcdad361660bf48b@mail.gmail.com> <491C5339.8090801@dcrocker.net> <20081113163833.GN76118@shinkuro.com> <491C699B.4000702@nortel.com> <20081113180841.GO76118@shinkuro.com> <491C711C.3030605@leisi.net> <20081113183919.GR76118@shinkuro.com> <p06240603c542266a5094@[10.227.68.106]> <alpine.LSU.2.00.0811131922190.14367@hermes-1.csi.cam.ac.uk>
In-Reply-To: <alpine.LSU.2.00.0811131922190.14367@hermes-1.csi.cam.ac.uk>
X-Enigmail-Version: 0.95.0
OpenPGP: id=EB5CCB28; url=http://peter-dambier.de/pgp/
X-Y-GMX-Trusted: 0
X-FuHaFi: 0.67
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
Reply-To: peter@peter-dambier.de
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: ietf-bounces@ietf.org
Errors-To: ietf-bounces@ietf.org

Windows is one of the most prominent users of DNS.

I remember you could send them netbios packets and
windows would put them into the DNS cache.

Be asured they will put dnsbl into the cache and
then the famous IE will look for cnn.com on 127.0.0.1

It makes sense after all because the spammers do host
malware sites too. Looking up a dnsbl will prevent
your browser from accidently showing malware sites :)

Be asured sooner or later some silly bugger will try
and it works - no more malware and no popups either.

Kind regards
Peter

Tony Finch wrote:
> On Thu, 13 Nov 2008, Ted Hardie wrote:
>> Thanks for the pointer. I had missed this technical comment in the
>> crowd, and I think it is very important indeed.  By re-using RRs with
>> context-specific semantics, the proposal does serious harm to
>> interoperability.
> 
> Is there any evidence for that?
> 
> Tony.

-- 
Peter and Karin Dambier
Cesidian Root - Radice Cesidiana
Rimbacher Strasse 16
D-69509 Moerlenbach-Bonsweiher
+49(6209)795-816 (Telekom)
+49(6252)750-308 (VoIP: sipgate.de)
mail: peter@peter-dambier.de
http://www.peter-dambier.de/
http://iason.site.voila.fr/
https://sourceforge.net/projects/iason/
_______________________________________________
Ietf mailing list
Ietf@ietf.org
https://www.ietf.org/mailman/listinfo/ietf