I believe that the data isn't actually corrupt.
The crux of the issue:
What R Scott Perry objected to when he was the sole programmer was that
the EU is a political body, and that the RIPE data should be stating the
exact country that the IP allocation is in. If the IP is in the
Netherlands, the code should be NL, not EU.
http://www.mail-archive.com/[email protected]/msg22631.html
I believe that a declude filter text file with the line:
COUNTRIES 1 STARTSWITH EU
would have triggered in this case, despite the "corrupt RIPE data"
presentation of the result in the header.
Andrew.
________________________________
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of Bonno Bloksma
Sent: Friday, June 29, 2007 11:25 AM
To: [email protected]
Subject: Re: [Declude.JunkMail] all_list.dat
Hi,
I understand the dynamic nature of the network assingments. That
was why I wrote part 2 of my message. I like to have a way to see how
many errors I get about corrupt data. If it's just a few per week, no
problem. If it gets to be sever a day maybe it's time for a new
all_list.dat. Right now I don't seem to have a way to detect that. :-(
Met vriendelijke groet,
Bonno Bloksma
hoofd systeembeheer
tio hogeschool hotelmanagement en toerisme
begijnenhof 8-12 / 5611 el eindhoven
t 040 296 28 28 / f 040 237 35 20
[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> / www.tio.nl
<http://www.tio.nl>
----- Original Message -----
From: Gary Steiner <mailto:[EMAIL PROTECTED]>
To: [email protected]
Sent: Friday, June 29, 2007 7:37 PM
Subject: re: [Declude.JunkMail] all_list.dat
The "corrupt RIPE data" should be referring to
145.53.30.139. Though if you go to www.ripe.net and do a search,
145.53.0.0/16 is listed as belonging to Planet Technologies with an
email address of [EMAIL PROTECTED] and being in The Netherlands. Which
is essentially the same as the listing for 213.75.0.0/16.
Unfortunately the entries in the RIPE database don't
have dates associated with them, so you can't tell if those listings
were the same back in May when the all_list.dat was created. The
listings change all the time, so essentially the all_list.dat file is
outdated as soon as it comes out. And it also doesn't help that RIPE,
ARIN, APNIC, LACNIC, etc. are all separate independent entities with
separate databases, so when things change Declude has to look in many
places to update the all_list.dat.
Gary
-------- Original Message --------
> From: "Bonno Bloksma" <[EMAIL PROTECTED]>
> Sent: Friday, June 29, 2007 4:15 AM
> To: [email protected]
> Subject: [Declude.JunkMail] all_list.dat
>
> Hi,
>
> I'm using the all-list.dat from may 2007. Occasionaly
I was checking the declude junkmail logs to see if any new problems with
unknown networks would arise.
> But today I found out that information is not in the
Declude log at level high. In the headers of a mail I found:
> X-Country-Chain: 'EU' [corrupt RIPE
data]->NETHERLANDS->destination
>
> The Received lines are:
> Received: from hpsmtp-eml16.kpnxchange.com
[213.75.38.116] by student.tio.nl with ESMTP (SMTPD-9.21) id A48204B4;
> Fri, 29 Jun 2007 08:19:46 +0200
> Received: from hpsmtp-eml05.kpnxchange.com
([213.75.38.105]) by hpsmtp-eml16.kpnxchange.com with Microsoft
SMTPSVC(6.0.3790.1830);
> Fri, 29 Jun 2007 08:19:46 +0200
> Received: from colligno601a0c ([145.53.30.139]) by
hpsmtp-eml05.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.3959);
> Fri, 29 Jun 2007 08:19:45 +0200
>
> In the loglines for this message there is no mention
of "corrupt RIPE data" which is what I was looking for all the time. So:
>
> 1) Can we have a new all_list.dat with updated info
please. KPN is a large telco which has 4 ISPs covering the Netherlands.
>
> 2) In what way can I detect when the all_list.dat file
is getting oudated, when information about networks is missing/corrupt?
>
>
> Met vriendelijke groet,
> Bonno Bloksma
> hoofd systeembeheer
>
>
>
> tio hogeschool hotelmanagement en toerisme
> begijnenhof 8-12 / 5611 el eindhoven
> t 040 296 28 28 / f 040 237 35 20
> [EMAIL PROTECTED] / www.tio.nl
>
> ---
> This E-mail came from the Declude.JunkMail mailing
list. To
> unsubscribe, just send an E-mail to
[EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail". The archives can
be found
> at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list.
To
unsubscribe, just send an E-mail to
[EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can
be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
