Re[2]: [vps-mail] Dramatic increase of SPAM during last days

[Abigail Marshall <abigail@xxxxxxxxxxxx>]

GS> On Tue, 24 Aug 2004 08:46:00 -0400, "Brian Haines"
GS> <providertalk@xxxxxxxxxxxxxxxx> wrote:

GS> Open relays are no longer anything like the problem they used to be. The
GS> biggest problem nowadays is people on dialup and cable/DSL connections who
GS> have become "trojanised" and are acting as open proxies. For this reason,
GS> I'd drop list.dsbl.org and relays.ordb.org and use these RBLs instead:

I use list.dsbl.org and here are stats for what it blocks on
a daily basis:

SENDMAIL REPORT, From: Aug 23 00:00:08
Total Messages Sent: 956
Open Relay Blocked - dsbl.org: 1005
Spamhaus Blocked: 550

SENDMAIL REPORT, From: Aug 22 00:00:08
Total Messages Sent: 752
Open Relay Blocked - dsbl.org: 1016
Spamhaus Blocked: 550

SENDMAIL REPORT, From: Aug 20 00:00:48
Total Messages Sent: 763
Open Relay Blocked - dsbl.org: 862
Spamhaus Blocked: 496

So I'd really take issue with your "no longer a problem"
statement. As you can see from the above stats, on any given
day the blocked messages exceed the total number that are
unblocked, and dsbl.org is (for me) catching the highest
number. Partly this is because it is the first one checked
on my system - but I'd be reluctant to drop it considering
the performance I'm seeing.

GS> First of all, I'd replace sbl.spamhaus.org with sbl-xbl.spamhaus.org because
GS> it also contains a list of known, exploited machines (xbl.spamhaus.org), and
GS> opm.blitzed.org (a list of open proxies).

I do use sbl-xbl.spamhaus.org as well - its performance is
reflected in the "Spamhaus Blocked" entry - and as you can
see it blocks about half the total number blocked by
dsbl.org. As noted, this may simply because dsbl.org runs
first; but I still think it makes sense to monitor the stats
before dropping a list.

-Abigail

======================================================================
This is <vps-mail@xxxxxxxxxxxx>       <http://www.perlcode.org/lists/>
Before posting a question, please search the archives (see above URL).