[180067] in North American Network Operators' Group
Re: Spamhaus BGP feed experiences?
daemon@ATHENA.MIT.EDU (Matthias Leisi)
Wed May 20 16:37:37 2015
X-Original-To: nanog@nanog.org
From: Matthias Leisi <matthias@leisi.net>
Date: Wed, 20 May 2015 22:37:29 +0200
To: nanog@nanog.org
In-Reply-To: <555B8313.5080400@netassist.ua>
Errors-To: nanog-bounces@nanog.org
--Apple-Mail=_96D41B7D-044F-4D05-A497-5932EC1CF3D0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=windows-1252
At dnswl.org <http://dnswl.org/> we check our data against the DROP list =
every once in a while. The overlap of DROP with legitimate sources of =
SMTP traffic is very, very small: a low single-digit number, and most of =
them are crappy to start with (so we don=92t publish them, but only keep =
them in our database for reference purposes).=20
=97 Matthias
> Am 19.05.2015 um 20:38 schrieb Max Tulyev <maxtul@netassist.ua>:
>=20
> How much false positives (i.e. blackholing traffic users want to =
reach)?
>=20
> On 18.05.15 21:04, Marco d'Itri wrote:
>> On May 17, Mike Lyon <mike.lyon@gmail.com> wrote:
>>=20
>>> Any ISPs out there (big or small) ever used the Spamhaus BGP feed to
>>> prevent against botnet, spam, etc? If so, how has your experience =
been? Is
>>> it worthwhile? Has it helped? On / off list responses are =
appreciated in
>>> advance.
>> We use Spamhaus DROP (not the BGP version: our software asks a human =
to=20
>> review each change).
>> The benefits are not obvious since we do not have access customers, =
but=20
>> it will blackhole some networks you obviously do not want to talk to,
>> and it has not caused any troubles either.
>>=20
>=20
--Apple-Mail=_96D41B7D-044F-4D05-A497-5932EC1CF3D0
Content-Disposition: attachment;
filename=smime.p7s
Content-Type: application/pkcs7-signature;
name=smime.p7s
Content-Transfer-Encoding: base64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--Apple-Mail=_96D41B7D-044F-4D05-A497-5932EC1CF3D0--
