[Dshield] dshield-based RBLs?

Brenden Walker BKWalker at DRBSystems.com
Mon Jun 7 18:53:40 GMT 2004


> -----Original Message-----
> From: John Hardin [mailto:johnh at aproposretail.com] 
> Sent: Monday, June 07, 2004 2:18 PM
> To: DShield mailing list
> Subject: [Dshield] dshield-based RBLs?
> 
> 
> Johannes:
> 
> I'm pretty sure I've suggested this in the past, but I'm 
> going to suggest it again just for discussion.
> 
> I would like to see some DNS RBLs based on dshield scanner 
> data. One possibly proactive way to block spam from the 
> hordes of compromised windows boxen would be to have my MTA 
> reject anything originating from an IP address that's spewing 
> NetBIOS traffic or known vulnerability scanning traffic at 
> the world...
> 
> Comments?

This may be okay for some, but many users may not get the same IP address
from day to day.  I think the usefulness of this approach would be very
limited.

Just my 2 cents.



More information about the list mailing list