At 2:53 PM -0800 2/12/04, Global Homes Webmaster wrote:On 2/12/04 at 14:31, Warren Michelsen wrote:
Where can I find the netblocks of known spammers so I can put them in my blacklist?
Hmm. You say that as if 'the netblocks of known spammers' is something that's static and well-known, which it ain't.
I'm not talking about the spammer with a laptop, a dial-up account and a list of open proxies. But at any given time the net blocks of the professional spam houses are probably well known.
The Spamhaus Project used to post a "SBL Advisory IP Blocklist". Is this now incorporated into sbl-xbl.spamhaus.org?
Yes. The SBL is one part of it, which is the less labile spammer-controlled addresses. You can get *ONLY* that by using sbl.spamhaus.org. What Steve Linford is calling the XBL is his republication of the 'Composite Blocking List' described at http://cbl.abuseat.org. That list is machines that have behaved in ways which are strictly idiosyncratic to open proxies and otherwise 'owned' machines used to send spam. The CBL alone catches somewhere in the 50-85% range of all spam (the range is wide because different sites really do see different spam loads) with zero false positives (really) and the SBL-XBL combo generally will catch 70-90% of all spam with an insignificant rate of false positives (i.e. zero for most sites over most time, occasionally an escalated listing will mean that something like the Sprint corporate servers will be listed for a day or two as an attention-getter)
Unless you are extremely sensitive to having mail from ISP salesmen shunned once in a blue moon when that ISP is doing a notably bad job of spammer control, there's not much reason for any site to not use the combined SBL-XBL.
--
Bill Cole
[EMAIL PROTECTED]
############################################################# This message is sent to you because you are subscribed to the mailing list <[EMAIL PROTECTED]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
