On [Mon, 07.06. 08:05], alex wrote: > > On Jun 7, 2004, at 12:24 AM, Wim Verveen wrote: > > > I am actually trying this out. It doesn't catch a lot until now. Maybe > > the database needs to grow or more 'points of measurement' are needed? > > > I think they need more points of measurement, the database doesnt > really grow because > they are only scanning mails on their own mailserver, and they drop > ip's after 24h. > The main problem of a central database on infected hosts is, that today's malware has a strong local spreading character.
let me put it another way to become clear: as far as I can tell about 95% of virus senders come from the same TLD (in our case .at). This is a consequence of the way e-Mail addresses are collected. So such a Blacklist automatically gets a strong local bias an can never possibly contain a reasonable amount of worldwide scum hosts. Except someone puts up a central DB fed by people all 'round the Net. Goesta -- Wiener Hilfswerk - EDV 1072 Wien, Schottenfeldgasse 29 Tel: 512 36 61 DW 407 / Fax 512 36 61 33 -- Attached file included as plaintext by Ecartis -- -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iQEVAwUBQMlePuEKFiIqAG4fAQL9KQgAqJO3+8vLwiBiD7rS53xEB1JUlXL274Uz jfTkMil8nYJ76HRdEpVR/m0tkXCiD/8/cz1gmgdIb3GpOeaT8Ltm5hPpD22mKags h/bDEDs0pi9flk60bOGdpDc4qyv9yq1Ada/AZmD1/yCwHFoVlOgI2114ypOu6gQj CADKCJsYwZA6rcdFQqhJ0c/AYC32JnBaR5F4rDimJsnwIq47ussGUlVQAJ0KsMVx 7bChcTeiG9buziBr7oiwkGQCe70L4/R4uzJxXApNmw1DkgOKxJp+db8+++6Zinq0 HnGVMCmP+yXGYSs40DbM3cbym8reVsMUlDf+iyyy3oNMDs6BrZyqlg== =90It -----END PGP SIGNATURE----- - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
