Mailing List SIMS@mail.stalker.com Message #9645
From: Jeff Folk <jfolk@qzoneinc.com>
Subject: Re: RBL list
Date: Thu, 15 Nov 2001 09:38:04 -0600
To: SIMS Discussions <SIMS@mail.stalker.com>
on 11/15/01 7:09 AM, Stonewall Ballard wisely articulated:

> At 7:29 AM -0500 11/15/01, Bill Cole wrote:
>> Beware: there is also massive collateral damage in the other lists
>> rolled into the top-level zone. Despite the name, the 'relays' zone
>> is far more than just relays and Joe has recently added the
>> 'Openlists' list to it, causing *huge* collateral damage. If you use
>> that zone, it is ESSENTIAL that you use a current SIMS which can
>> differentiate between return values and choose your blocking that
>> way. Joe could well add other new lists into the zone without notice
>> and if you have 127.* in your blacklist you would automatically use
>> those.
>
> What return value is associated with the "Openlists" list?
>
From the http://relays.osirusoft.com website:

How are the entries stored at relays.osirusoft.com?
The DNS addressing is as follows:
For a given address, a.b.c.d will return one of the following values if a
dns lookup of d.c.b.a.relays.osirusoft.com is performed. 
 
127.0.0.2                  Verified Open Relay
A verified open relay in most cases is handled by other relay blocklist
servers, and imported into the Zone file.
127.0.0.3                  Dialup Spam Source
Dialup Spam Sources are imported into the Zone file from other sources and
some known sources are manually added to the local include file.
127.0.0.4                  Confirmed Spam Source
A site has been identified as a constant source of spam, and is manually
added.  Submissions for this type of spam require multiple nominations from
multiple sites.
127.0.0.5                  Smart Host (In progress)
A Smart host is a site determined to be secure, but relays for those who are
not, defeating one level of security.  When this is ready, it will be
labeled outputs.osirusoft.com .  NOTE:  I strongly discourage using outputs
due to it being way too effective to be useful.
127.0.0.6                  A Spamware software developer or spamvertized
site.  This information will automatically be maintained by
www.spamsites.org shortly.
127.0.0.7                  A list server that automatically opts users in
without confirmation
127.0.0.8                  An insecure formmail.cgi script.  (Planned)
127.0.0.9                  Open proxy servers

You just put the corresponding 127.0.0.x into your local blacklist.

HTH!
Jeff

Subscribe (FEED) Subscribe (DIGEST) Subscribe (INDEX) Unsubscribe Mail to Listmaster