[Dshield] Johannes: Any Interest in a DShield RHSBL?

John Hardin johnh at aproposretail.com
Tue Feb 10 16:26:09 GMT 2004


On Tue, 2004-02-10 at 03:42, Johannes B. Ullrich wrote:
> It may work if you can reliably parse the last received header. Will
> have to think about how this fits into our model. At this point, it
> probably shouldn't be a high priority project (first have to fix the
> DLink and FW-1 stuff)

You'd need the submitter to include info on which relays are generating
Received: header(s) that can be trusted. e.g. my mail relay, plus
possibly my ISPs (if, for example, I'm running fetchmail).

You don't want to blindly trust all of the Received: headers.

--
John Hardin  KA7OHZ                           
Internal Systems Administrator/Guru               voice: (425) 672-1304
Apropos Retail Management Systems, Inc.             fax: (425) 672-0192
-----------------------------------------------------------------------
  Failure to plan ahead on someone else's part does not constitute an
  emergency on my part.
                                  - David W. Barts in a.s.r
-----------------------------------------------------------------------
 20 days until ICQ Corp goes away - have you installed Jabber yet?




More information about the list mailing list