[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: bogus blacklists



No one in their right mind would block using BLARS, SPEWS, or the FIVETEN*
block lists, at least not in a commercial setting where receiving email
consistantly is important. You could certainly use them as part of a scoring
system like Spamassassin. And on a private email server, well, you can block
the whole world and it wouldn't matter, the only person losing email is
yourself.

Spamhaus tends to be rather good, and their XBL/CBL block list is quite
effective. Not many false positives, and collateral damage tends to be kept
to a minimum. So it is good for commerical/work settings.

Even the generally effective Spamcop should really only be used in a scoring
system, not outright blocking, because we've seen cases where IPs are
reported by just 1 or 2 users and already it causes that IP to be blocked,
so sometimes it doesn't take much for a relatively high volume ISP email
server to get blocked accidentally by people reporting spam. I think they
change their algorithms every now and then, so maybe they have changed the
above behaviour recently.

I like using actively maintained lists, rather than ones that tend to get
stale quite quickly... and ones that aren't anal and say you need to
"donate" $50, $100, $1000 to them to remove a listing, especially ones that
want to charge you even if THEY made the mistake! I've never been in any of
these "charge you" lists, but i can imagine that if you were in one, what
kind of hell you'd have to get out.

----- Original Message ----- 
From: "John Kelly" <jak@isp2dial.com>
To: <debian-isp@lists.debian.org>
Sent: Thursday, July 20, 2006 10:15 PM
Subject: bogus blacklists


www.dnsstuff.com says don't use:

> BLARSBL, FIVETENIGNORE, FIVETENSRC, JAMMDNSBL, SPAMBAG, SPEWS
> (these block large IP ranges)

> MAPS-DUL, SORBS-DUHL
> (these knowingly list IPs that do not meet listing criteria).

I inherited some IP space listed at five-ten and blars, but nowhere
else.  Anyone using them?





Reply to: