On 2011-12-13 19:10, Kevin A. McGrail wrote:
has anybody been bitten, lately by URIBL's .255 case?
Unsure. There have been people reporting that URIBL sometime in the
recent past was returning purposefully wrong answers to queries via
Google's DNS. Is that a 255 case?
I'd say yes according to
BLOCKED - POSITIVE RESPONSE ACL
# host -tA 2.0.0.127.multi.uribl.com
2.0.0.127.multi.uribl.com has address 127.0.0.255
# host -tTXT 2.0.0.127.multi.uribl.com
2.0.0.127.multi.uribl.com descriptive text "1.2.3.4 has been block
due to excessive queries."
Blocking or not responding to queries is OK. Giving purposefully wrong
answers (other than one that we work together to identify as a DNS block
determination bit).
then SA has to specify and BL operators can chose to adopt.
