On 2/13/04 at 06:08, Warren Michelsen wrote: > At 2:53 PM -0800 2/12/04, Global Homes Webmaster wrote: > >On 2/12/04 at 14:31, Warren Michelsen wrote: > > > >> Where can I find the netblocks of known spammers so I can put them > >> in my blacklist? > > > >Hmm. You say that as if 'the netblocks of known spammers' is > >something that's static and well-known, which it ain't. > > I'm not talking about the spammer with a laptop, a dial-up account > and a list of open proxies. But at any given time the net blocks of > the professional spam houses are probably well known.
I understood what you meant. It's not like spammers announce to the world where they're operating from, or that they're confined to particular blocks of IP space. It may not be terribly hard to deduce when a big time spammer starts to operate from some specific IP range, but the blocks they operate from aren't set in stone and there's no guarantee that any one list is going to have them all at any given time. > The Spamhaus Project used to post a "SBL Advisory IP Blocklist". Is > this now incorporated into sbl-xbl.spamhaus.org? That's what the 'sbl' part of 'sbl-xbl' is. If you want _just_ the SBL, use sbl.spamhaus.org. The XBL incorporates the cbl.abuseat.org list, which apparently uses some unspecified algorithms to recognize hosts that behave like spammers, open relays, open proxies and otherwise compromised machines being abused by spammers. The combined sbl-xbl list catches a very large portion of spam sources with minimal false positives. For better info from the proverbial horse's mouth, see <http://www.spamhaus.org/>. -- Christopher Bort | [EMAIL PROTECTED] Webmaster, Global Homes | [EMAIL PROTECTED] <http://www.globalhomes.com/> ############################################################# This message is sent to you because you are subscribed to the mailing list <[EMAIL PROTECTED]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
