On 12/11/2008 13:38, "Franck Martin" <franck(_at_)avonsys(_dot_)com> wrote:
It seems to me that FBL are good between MTAs. I'm not sure they are that
good, to report back on mail originating from machines on a ISP network. You
would have so many reports from zombies, it would not be funny. I think there
are other tools to monitor your network activity and the presence of Zombies
on your net.
Quite a few ISPs receive feedback on their entire network, which provides
both alerting and evidence of zombies or other badness.
This has, inevitably, led (along with other things) to spammers swapping
zombies much faster than before, so obviously it's not the only thing they
should be using. But, it still helps.
I've seen basically this same conversation happen at least a dozen times in
the past few years. Would it make sense for the ASRG to research & describe
how FBLs are used today?
_______________________________________________
Asrg mailing list
Asrg(_at_)irtf(_dot_)org
https://www.irtf.org/mailman/listinfo/asrg