Marc Perkel wrote:
Matus UHLAR - fantomas wrote:
Marc Perkel wrote:
I've also created a DNS based list of domains that provide consumer
dynamic IP address space. I'm using this list internally but
thought I'd make it public in case others can use it.
Trying to inspire innovation.
Example:
dig comcast.com.isphosts.junkemailfilter.com
This list was created by grabbing the registry barrier part of the
domain name of IPs from other DNS lists that list the IPs as dynamic.
Ken A wrote:
NJABL & PBL already provide this, AND they are already part of
SpamAssassin AND they work quite well.
So, while you are 'trying to inspire innovation', you should take
note of this potential problem:
http://www.rhyolite.com/anti-spam/you-might-be.html
On 29.05.08 14:49, Marc Perkel wrote:
They have name based lists? Show me where.
why should anyone need name-based lists?
Name based DNS lists are more reliable because IP addresses can change.
Obviously dynamic IPs and names change. Thats all built into DHCP (lease
time) and DNS (TTLs). So, please elaborate on your thinking here.
The name based list covers all IP addresses where the FCrDNS resolves to
that name.
Okay, so only domains that have dns setup correctly get into the list?
That leaves out huge chunks of the world. How is this more reliable? It
is probably a small subset of dynamic address space.
The botnet plugin does a good job of making use of broken & dnynamic DNS
names in SA. PBL and NJABL do a good job of identifying IP address space
that is dynamic. What can this method do better or is it supposed to do
something else?
Ken
--
Ken Anderson
Pacific.Net
