[99613] in North American Network Operators' Group
Re: DDoS Question
daemon@ATHENA.MIT.EDU (Matthew Sullivan)
Sat Sep 29 05:41:53 2007
Date: Sat, 29 Sep 2007 19:39:53 +1000
From: Matthew Sullivan <matthew@sorbs.net>
In-reply-to:
<9173D4AE142BB6449EFE552FC33747F80843B8@hmsexch.corp.safesecureweb.com>
To: "Raymond L. Corbin" <rcorbin@hostmysite.com>
Cc: Martin Hannigan <hannigan@gmail.com>, nanog@merit.edu
Errors-To: owner-nanog@merit.edu
Raymond L. Corbin wrote:
> messages to fail in our servers. You can always try the rbl that lists a
> lot of residential IP's in it...i think it's the PBL from spamhaus. That
> would help limit it, and blocking emails with the domain
>
You'd have better luck with SORBS DUHL if you don't want to pay for
Spamhaus data. (a peak of 192 messages/minute and an average of 4
messages per minute were considered excessive enough for my DSL's to be
blocked by Spamhaus). I would also suggest NJABL as it used to list
dynamics, except it is not listing just dynamics now, and it has merged
into Spamhaus as the PBL. Of course Trend are now running what was
MAPS, which is another pay for service which is also useful.
Regards,
Mat
