North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Slightly OT: Looking for an old domain for spam collection

  • From: Douglas Otis
  • Date: Wed Mar 28 09:56:17 2007

On Wed, 2007-03-28 at 13:34 +0100, Tony Finch wrote:
> On Wed, 28 Mar 2007, Chris L. Morrow wrote:
> >
> > didn't paul vixie post a problem domain a bit back that would suffice?
> IIRC he was complaining about junk DNS lookups to the RBL's original
> domain.


The conclusion of that thread can be found here:

A word of caution.  When attempting to collect IP address based abuse
information, spoofed BGP announcements MUST be tracked as well.  This
topic or even mention of ASNs was excluded in the "Guidelines for
Management of DNS-Based Reputation Systems for Email" written by Yakov
Shafranovich, Nick Nicholas, Matt Sergeant, and Chris Lewis and
published by Nick Nicholas on the ASRG reflector.  This paper ironically
excluded the role of the provider.

A cooperative effort by providers is likely the _only_ viable solution
for dealing with this chronic problem.  Targeted abuse is also unlikely
to be detected from disposed MX domains, but will detect amateurs.