Jeroen Massar schrieb:
> Rainer Duffner wrote:
> [..]
>   
>> How does that work on IPV6 anyway?
>> I read that RBLs will be dead in IPV6-land, due to the fact that the
>> address-space can't be packed in a database anymore..
>>     
>
> The person who writes that does not realize how much easier it becomes.
>
> RBLs will simply take a scheme of:
>
> Register in db a max of   5 spamming IPs in the database per /64,
>    ""       ""    ""     50 spamming /64's per /48
>    ""       ""    ""    500 spamming /48's per /32
>
> The '5' is variable of course. Too much spam, just block the whole /32
> unless they clean it up. Verrrryy easy.
>
> Heck for that matter similar system could be employed for IPv4:
>
>   

Spamhaus does that, AFAIK.


> Register in db a max of  5 spamming IPs in the database per /24,
>    ""       ""    ""    50 spamming /24's per ASN
>
> Tada, block out the whole ASN when it hits the threshold. Then again,
> there won't be much mail coming out of there in those cases.
>
> Also, politically all /48's should be registered in WHOIS, which is of
> course a good thing. It seems though that there is no enforcement there
> and most ISPs don't care at all though.
>
>   
>> Currently, RBLs are an important part of our spam-defence.
>>     
>
> You do mean as a scoring method I hope...
>
>   


Yes, but we also block. Mostly dynamic IPs and stuff on the swinog/IX-RBL.
On my own mailserver, I block all Asian IPs ;-)



Rainer

_______________________________________________
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Antwort per Email an