[94806] in North American Network Operators' Group
Re: an RBL for virus alert senders?
daemon@ATHENA.MIT.EDU (Rich Kulawiec)
Sat Feb 10 10:27:19 2007
Date: Sat, 10 Feb 2007 10:24:05 -0500
From: Rich Kulawiec <rsk@gsp.org>
To: nanog@merit.edu
In-Reply-To: <45CDDE95.8050401@easydns.com>
Errors-To: owner-nanog@merit.edu
On Sat, Feb 10, 2007 at 10:02:45AM -0500, Mark Jeftovic wrote:
> Is there an RBL for mail servers run by brain dead "postmasters" that
> insist on running anti-viral software that sends out less-than-useless
> "virus alerts", "virus in your email", "banned attachment" spewage to
> the guaranteed-to-be-forged "From" address in the message headers?
A number of DNSBLs now includes zones for outscatter (aka "backscatter")
senders running either broken anti-virus s/w, broken anti-spam s/w,
broken mailers, or broken appliances.
See:
http://enemieslist.com/news/archives/2006/05/a_useful_collec.html
for a useful collection of links. For DNSBLs, I believe you may wish
to look at:
http://tqmcube.com/weight.php
http://www.au.sorbs.net/using.shtml
http://www.uceprotect.net/en/index.php?m=3&s=0
(Keep in mind that the last was written by folks whose native tongue
is German, so cut them some slack on spelling/grammar errors.)
I think (but am not sure) that Spamcop also lists outscatter senders.
---Rsk
