[117262] in North American Network Operators' Group
Re: Repeated Blacklisting / IP reputation
daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Tue Sep 8 14:40:50 2009
To: John Curran <jcurran@arin.net>
In-Reply-To: Your message of "Tue, 08 Sep 2009 13:43:39 EDT."
<CF5DAECD-A155-47AC-9759-913FCF77FAD8@arin.net>
From: Valdis.Kletnieks@vt.edu
Date: Tue, 08 Sep 2009 14:39:56 -0400
Cc: "nanog@nanog.org" <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--==_Exmh_1252435196_3318P
Content-Type: text/plain; charset=us-ascii
On Tue, 08 Sep 2009 13:43:39 EDT, John Curran said:
> I'm sure there's an excellent reason why these addresses stay
> blocked, but am unable to fathom what exactly that is...
If I'm a smaller shop with limited clue, there's 3 likely colloraries:
1) Even a smallish spam blast is big enough to cause me operational
difficulties, so I'm tempted to throw in a block to "fix" it.
2) Once the spammers have moved on, it's unlikely that I have enough customers
trying to reach the blocked address space and complaining for me to fix it, and
the people *in* that address space can't successfully complain because I've
blocked it.
3) The damage to traffic is of consequence to the remote site, but isn't a
revenue-impacting issue for *ME*.
The third point is the biggie here.
--==_Exmh_1252435196_3318P
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001
iD8DBQFKpqT8cC3lWbTT17ARAhrGAKCte9cWNG8llJeB6xD/LEbBecmm4gCcCrMY
z6XKGluLTUZfzMI7Z3RgL2Q=
=6HHN
-----END PGP SIGNATURE-----
--==_Exmh_1252435196_3318P--
